How use the method hasPermission in weblogic server 6.1

Question

Hello everybody !
In my application web ,i restrict access to some ressources (some jsp)
to some specified groups .
So,i create permissions in the file web.xml , as indicated in the doc
6.0 .
For example only the user : system can access to all the jsp , and the
others users no .
Now ,in my code ,I would like to use the method hasPermission in order
to modify my application according to the differents groups of users .
But my problem is that i don't know the parameter aclName !
For the parameter permission I use the syntax "new
weblogic.security.acl.PermissionImpl(".../x.jsp") .
For the parameter sep (char),i use : '.' .
But i don't find the parameter aclName .
When i was in weblogic 5.1 ,i created permission in the file
weblogicURL.policy with the syntax : " Permission
weblogic.security.acl.URLAcl "weblogic.url",".../x.jsp" " and after
i gave "weblogic.url" as parameter for aclName .
But in version 6.0, I try web.xml, web ? but nothing is good .
Is there any person which have an idea or the solution ?
All the sugestions are welcome !
Thanks by advance !
Good bye .

Answer 1

hi,
maybe a better approach could be to use roles instead of permissons.
Your menu.jsp could look like this:
<%
if(request.isUserInRole("super-user"))
%>
... code HTML where the button "Creation" is created
<%
%>
You can map the role 'super-user' to an individual principal or a
user group in weblogic.xml. In that case only users that are in
the mapped group/principal will see the 'creation' link. So simply
add user 'system' to a group 'super-user'.
regards,
przemek
Marc Alfonsi schrieb:
Hi Kirann and everybody!
Thanks for your message .
I'm going to explain better than the first time .
I set up security-constraints in my web.xml .
For example only "system" can access to the directory Creation and
all its .jsp , and the others users no .
Now ,in my code , there is a jsp : menu.jsp which displays some
possibilities : creation of an employee , visualisation ...with HTML
code : button "Creation" which call a .jsp of the directory Creation .
Actually , if a user different of "system" try to click on the button
"Creation" there is a dialog box of login . The user writes its loggin
but the access is prohibited ( because security-constraint in web.xml
).It's normal but not very well .I would like that a user who don't
have access to the functionality "Creation" don't see the button
"Creation" !
So in menu.jsp , i would like to use the method hasPermission at the
location of the button "Creation" is created with HTML code :
<%
if weblogic.security.acl.Security.hasPermission(.....,new
weblogic.security.acl.PermissionImpl("/Creation/x.jsp"),'.')
%>
code HTML where the button "Creation" is created
<%
%>
But my problem is that i don't know the first parameter which
correspond
to aclName .
Any suggestions are welcome .
Thanks for help .