How to use isUserInRole

[Justin Howard]

Hi All,

I am trying to make this work in the app with no favourable results.

    
if (request.isUserInRole("ResearchAdmin")) {
        	  logger.debug("cam here isUserInRole works ");
          }

Thanks

[Sebastian Janisch]

Well, what exactly is the problem.

Did you already authenticate you to the server as 'ResearchAdmin' ?

[Justin Howard]

Yes. And added principals to it.

    

public boolean commit() throws LoginException {
    
	  if (!authenticated) {
		  
		  return false;
	  }
	  
	  DbUsernameCredential cred = new DbUsernameCredential(userId,username);
	  subject.getPublicCredentials().add(cred);
	  // lookup user groups, add to Subject
	  Set principals = lookupGroups(username);
	  subject.getPrincipals().addAll(principals);
	  principalsAdded = new HashSet();
	  principalsAdded.addAll(principals);
	  return true;
  }

[Sebastian Janisch]

The Role Users are maintained by the container. The default implementation is defining the users with passwords in the tomcat-users.xml and web.xml, the rest is taken care of by the container.

[Justin Howard]

Thank you.

I have not maintained the users in the tomcat-user.xml. I have retained them in the database.
Does this mean I cannot use the function.
Is there a simple way to check if the person is tied to a role, or should I write a custom function checking the principals
if there is a particular principal added for a user. If I do so will it slow down the app?

Thanks

[Bear Bibeault]

Justin Howard wrote:Does this mean I cannot use the function.

Of course not. How's it supposed to know anything about your database or data model?

Is there a simple way to check if the person is tied to a role, or should I write a custom function checking the principals

You'll need to write code that checks the roles according to the rules of your data model.