How to use Request.isUserInRole method?

[Dave Bosky]

I want to use the standard J2EE construct HttpRequest.isUserInRole() in my web application. I understand how to check if the user is in a particular role by using if (request.isUserInRole(roleType)) {....do this....}.

How do I assign the roles to the user when they login so I can use the method above? I'm using Tomcat5 and W2K.

Thanks,
Dave

[Nathaniel Stoddard]

You should consult the Tomcat documentation for how to do this. Basically, you'll need to create a protected resource collection in your deployment descriptors, create roles in your deployment descriptors, create some database or other data store whose data will be consulted when a user logs into the protected area of your web application, and that's it.

What roles belong to an individual when they authenticate themselves to the application is specified in the database, or however you set it up in Tomcat. Check out the docs. It's pretty simple.

[Bear Bibeault]

Moving to the Tomcat forum.