Security Model & RequestDispatched

[ravi janap]

Hi
Please confirm the answer to this question from Eduardo Cobian:
Which statements are correct about security?
1) The security model doesn't apply when a servlet uses a RequestDispathcer to include or forward a resource
2) The security model doesn't apply when a servlet uses a RequestDispathcer to include a resource but it applies when it uses forward
3) The security model applies when a servlet uses a RequestDispathcer to include or forward a resource
4) The security model doesn't apply when a servlet uses a RequestDispathcer to include or include a static resource
The answer says 1 is correct.
If we use RequestDespatcher to include or forward to a resource from the same application, shouldn't the security model of the current application apply?
--Ravi

[Dominic Paquette]

I would of answered 3

[Andy Smith]

I think "3" is the correct option ..as you are not able to get the resource somewhere in other context...
So Security applies :roll: