DB Role Authorization

[Murtuza Akhtari]

Hi all,

I am using form based authentication from LDAP. However I want to assign roles from my own database. I followed a tutorial on setting up form based authentication. Only, I did not set any roles in web.xml... and did not specify any < auth-constraint > in my < security-constraint >. But whn I try to access my secured resource....it takes me to the secured resource without taking me to the login page.

Can somebody help me with this?? Is it even possible to have form based authentication without authorization?

Please reply !!
Thanks