Tomcat authentication without specifying a role
1 posts in topic
Flat View  Flat View
TOPIC ACTIONS:
 

Posted By:   Lenka_Barker
Posted On:   Monday, February 23, 2004 03:22 AM

Hello Does anyone know if it is possible to use Tomcat just to authenticate users without defining roles and allow the business logic of our system to provide the access control? The reason that we are looking into this is that our authentication login comes from an employee, but the employee could have many different positions within the organisation. We were hoping to provide a generic authentication process which allows them to login, then we would assign permissions as needed when they traverse our system. We thought of giving everyone a generic "user" role with access to all the pages and then go from there, but thought it would be even better if we did not need to give them a role at all   More>>

Hello


Does anyone know if it is possible to use Tomcat just to authenticate users without defining roles and allow the business logic of our system to provide the access control?


The reason that we are looking into this is that our authentication login comes from an employee, but the employee could have many different positions within the organisation. We were hoping to provide a generic authentication process which allows them to login, then we would assign permissions as needed when they traverse our system.


We thought of giving everyone a generic "user" role with access to all the pages and then go from there, but thought it would be even better if we did not need to give them a role at all.


Any thoughts on this would be greatly appreciated


Thanks,


Bonnie

   <<Less

Re: Tomcat authentication without specifying a role

Posted By:   Jason_Eacott  
Posted On:   Tuesday, March 9, 2004 02:27 AM

I think it's probably easiest to just roll your own authentication scheme in this case.
About | Sitemap | Contact