File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Tomcat and the fly likes Why JDBCRealm?? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of REST with Spring (video course) this week in the Spring forum!
JavaRanch » Java Forums » Products » Tomcat
Bookmark "Why JDBCRealm??" Watch "Why JDBCRealm??" New topic

Why JDBCRealm??

Ranch Hand

Joined: Dec 16, 2004
Posts: 63
Hi All,

I am very much excited to know as to what are the advantages of JDBCRealm?? What is the difference between Container Manages Security(CMS) and Bean Managed Security(BMS?? Is CMS having any advantage over BMS??

Thank you
David O'Meara

Joined: Mar 06, 2001
Posts: 13459

Are you talking about Tomcat? I'm not sure this is strictly a JDBC question.

I usually refer to it as programatic or declarative security i.e. security declared in code (maybe even beans) or in the container declaration or configuration. JDBCRealm is one way of implementing declarative security in Tomcat.

It is intially easier to manage security by writing the code into the page, but this quickly becomes nightmarish, particularly when you have some pages that are secure and some that aren't, and some that have a kind of hybrid mixture.

Personally my choice to always use the declarative kind. You then write minor code to manage code changes based on user roles, but you do that in the programming solution anyway.

Jeanne Boyarsky
author & internet detective

Joined: May 26, 2003
Posts: 32819

I agree with David. Moving to Tomcat.

[OCA 8 book] [Blog] [JavaRanch FAQ] [How To Ask Questions The Smart Way] [Book Promos]
Other Certs: SCEA Part 1, Part 2 & 3, Core Spring 3, TOGAF part 1 and part 2
I agree. Here's the link:
subject: Why JDBCRealm??
It's not a secret anymore!