Two Laptop Bag
The moose likes Web Component Certification (SCWCD/OCPJWCD) and the fly likes Security Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Certification » Web Component Certification (SCWCD/OCPJWCD)
Bookmark "Security " Watch "Security " New topic


Saurabh Naik
Ranch Hand

Joined: Apr 24, 2008
Posts: 87
I read the chapter security from HF book. but I am cofunsed..
If in my application there are 50 users and 3 roles i.e admin, user , guest . how can I assign these roles to my users ?
also confused in getUserInRole() and getUserPrinicpal() methods. what is the exact use of these methods ?

Thank you

SCJP 6 (88%), SCWCD 5 (78%), preparing for SCBCD
Ulf Dittmer

Joined: Mar 22, 2005
Posts: 42965

Those methods tell you the identty of the user who sent the request the servlet is currently working on (her user name), and which roles she has. This information can be used to personalize the response, and to check whether this user should be allowed access to the various parts/pages of the web app.
I agree. Here's the link:
subject: Security
It's not a secret anymore!