Hello Everybody,
I want to implement role based access for my web application and I want to know a good way of doing it. For eg. I know one way -- in the jsp, i check roles with scriplet and run the block of code if it has the required roles. I want to know better ways of doing it. Please help me out.
hi,
I have another doubt. I have been asked to use Jaas for Ldap authentication and authorisation. I mean if these two are different Realms right ? Please help....
If I were to implement security for a new project, I'd use Apache Shiro. It goes way beyond what the servlet security implemented by the servlet container provides, and -amongst many things- has a tag library you can use in your JSPs instead of scriptlets.
Thanks Tim, this is a good framework. Is there a detailed documentation or BOOK on Shiro. Also would like to know the disadvantages of shiro. I could not find any on the web.
Regards,
Deeps
Eliminate 95% of the weeds in your lawn by mowing 3 inches or higher. Then plant tiny ads:
a bit of art, as a gift, that will fit in a stocking
1
