Customer Login

[Gennady Shapiro]

I guess for the sake of this assignment you cannot say - my architecture assumes declarative security provided by the server and LoginManager class does not exist?
I am guessing they excpect to see LoginManager in your class diagram since its part of work flow.
Any thoughts?

[Gennady Shapiro]

I've changed my mind about this. The spec says the architecture must be J2EE first and foremost. Declarative security is an essential part of J2EE. So as long as I mention this in the assumption I don't need a dedicated LoginManager.
Any thoughts anyone?

[Robin Zhang]

I think we can use sevlet and jdbc to handle the login case. Do I have to use EJB in login use case?
[ April 28, 2002: Message edited by: Robin Zhang ]

[Alex Pisarev]

Originally posted by Robin Zhang:
I think we can use sevlet and jdbc to handle the login case. Do I have to use EJB in login use case?
[ April 28, 2002: Message edited by: Robin Zhang ]

Yes. Where are you goint to store login information for travel agents? They are UI clients, remember?

[Vivek Viswanathan]

HI
I did not think about security at all for the assignment, and I have no idea about the detail that I have to provide. I know that I amm going to https, but there is slight problem since there are 2 web servers I assume that there will be a Load Balancer, in front of both these servers. Since HTTPS is a session based protocol, we will have sticky sessions, do I have to get into all this detail.

Vivek