Able/Disable hyperlinks based on Login(User Credentials)

[Hemant Kumar Kawadlar]

Hi,

Help required
Is there any way so that we can able/disable particular links on a page based on login???
Page will be same for all types of users but hyperlinks shd be made active if the user has credentials of doing that work otherwise shd be visible but inactive.


Thanks in advance

[Eric Pascarello]

The server should not render them as links, that is the only secure way of doing it. Anyone that has any JavaScript knowledge can re-enable them and perform the action.

Eric

[Jeanne Boyarsky]

Hemant,
Welcome to JavaRanch!

To expand on what Eric said, it's common to use your server side language to control this. In Java, that would be the JSP. You only write out the link if the user has permission. This also helps by not advertising to hackers what other functions they should try to attack.

Also, you should have another check on the server side to make sure the user has access and didn't just type in a URL.