Application module tag security

Question

Hi, two questions:
1.Can I use datasources.xml to define the username and password attributes of the application module tag?
2.It is said that "when a username/password is defined in the JDBC connection named by the configuration you do not need to use username/password attribute" in the application module tag help. I could not do it. It always want me to write the username and the password values in the jsp. How can I do it?
Thanks a lot...

Answer 1

Tolga,
I'm not quite sure I understand your question. There are 2 ways of creating a connection from a DataSource. First, if in your data-sources.xml file you have configured the data source fully, you do not need to provide a username and password. The section below is from the default data-sources you get on installation:
     <data-source
          class="com.evermind.sql.DriverManagerDataSource"
          name="OracleDS"
          location="jdbc/OracleCoreDS"
          xa-location="jdbc/xa/OracleXADS"
          ejb-location="jdbc/OracleDS"
          connection-driver="oracle.jdbc.driver.OracleDriver"
          username="scott"
          password="tiger"
          url="jdbc:oracle:thin:@localhost:5521:oracle"
          inactivity-timeout="30"
     />
Note that the username and password are supplier. You can get a connection by using:
Context c = new InitialContext();
DataSource ds = (DataSource)c.lookup("jdbc/OracleCoreDS");
Connection conn = ds.getConnection();
This will give you an instance of the connection object for the SCOTT/TIGER schema, on port 5521 on the oracle database (i.e. whats defined in the default data-source.xml).
To pass the username and password programatically, do not provide the username and password lines in the data-sources.xml, and when you look up the connection use:
Connection conn = ds.getConnection("scott", "tiger");
So passing in the username and password.
Rob Cole
Oracle