@RolesAllowed, @PermitAll, etc Servlet . with Tomcat JDBC Realm

[Leonardo Carreira]

Hello friends..

i've a doubt about Servlet and Tomcat JDBC Realm..
i've two user credential, manager and admin
assume that i've configured Tomcat JDBC Realm.. does realm recognized in Servlet?..

i've configured Servlet like this instance..

    
@RolesAllowed({"manager"})
public class Servlet1 extends HttpServlet{}

then how to get User's Role for used on Servlet?

Thanks in advance..

[Leonardo Carreira]

Please help me and correct me if iam wrong..

Yap, iam just greenhorn..
Thanks in advance...

[Ankit Garg]

I don't know if @RolesAllowed can be used with Servlets or not. I think it is not supported on glassfish at least (reference). I think it will be supported after servlet 3.0 as given here. You can refer to this tutorial to see how to do this with configuration in web.xml file...

[William Brogden]

As far as I can tell, the servlet API for 2.5 and earlier did not provide for any annotations. All configuration was via web.xml.

NOW - some projects, such as Jersey, used annotations but that was outside the servlet API.

Using annotations for configuration is one of the big jumps for servlet 3.0. Here is the JSR for servlet 3.0.

Where did you see RolesAllowed in use?

Bill

[Leonardo Carreira]

is there any another way to configure roles in Servlet 2.5?..

i think i wanna save the role in Session.. (firstly, i save the role in Session when access Login Servlet)
and check it every access to Servlet.. .. yap, i think it's really "ticklish" to configure..
this is my implementation :

    
public class Servlet3 extends HttpServlet {
    private HttpServletRequest servletRequest;

    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        String role=servletRequest.getSession().getAttribute("Role").toString();
        if(role.equals("manager"))
           out.println("Allowed");
        else
           out.println("Not Allowed");
    }
} 

please correct me if i'm wrong..

Thanks in advance..