Win a copy of The Business Blockchain this week in the Cloud forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Security Model & RequestDispatched

 
ravi janap
Ranch Hand
Posts: 389
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi
Please confirm the answer to this question from Eduardo Cobian:
Which statements are correct about security?
1) The security model doesn't apply when a servlet uses a RequestDispathcer to include or forward a resource
2) The security model doesn't apply when a servlet uses a RequestDispathcer to include a resource but it applies when it uses forward
3) The security model applies when a servlet uses a RequestDispathcer to include or forward a resource
4) The security model doesn't apply when a servlet uses a RequestDispathcer to include or include a static resource
The answer says 1 is correct.
If we use RequestDespatcher to include or forward to a resource from the same application, shouldn't the security model of the current application apply?
--Ravi
 
Dominic Paquette
Ranch Hand
Posts: 64
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I would of answered 3
 
Andy Smith
Ranch Hand
Posts: 239
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I think "3" is the correct option ..as you are not able to get the resource somewhere in other context...
So Security applies :roll:
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic