Authentication against users in a table

Question

I am somewhat familiar with JAZN authentication but here is what I need to do and would GREATLY appreciate as much details as you can provide:
Say, I have a table USERS(USER_ID, NAME, ...) and several other tables in the DB. Let's say I have another table ADDRESS(ID, USER_ID, ADDRESS, ...). Several things needs to be done:
1. When user attempts to access a Input Form page to add new record in ADDRESS, a login screen should appear. I KNOW how to do this with either basic or form based authentication. However in this case user credentials will be stored using jazn tool.
2. Since I need USER_ID to be passed to my Input Form page I believe that I cannot use jazn for this, but rather to authenticate against my USERS table. How?
3. In this case (authentication against my USERS table) where the paswords are kept?
4. Also in this case, is it possible to provide several levels of access, ie all to managers, some to data enter people etc.
We are new to Oracle and JDev so any help is appreciated. The more the better...
Cheers!
Rade

Answer 1

Here is what I did and it does not work:
I have 'login.uix' page with username and password entries:
<form name="form0" method="post">
  <contents>
   <pageLayout>
    <pageButtons>
     <pageButtonBar>
      <contents>
       <submitButton text="Sign In" event="verifySignin"/>
       <submitButton text="Login" event="login"/>
      </contents>
     </pageButtonBar>
    </pageButtons>
   <contents>
  <tableLayout>
   <contents>
    <rowLayout>
     <contents>
      <messageTextInput name="username" prompt="Enter Name"/>
     </contents>
    </rowLayout>
    <rowLayout>
     <contents>
      <messageTextInput name="password" prompt="Enter Password" secret="true"/>
     </contents>
    </rowLayout>
   </contents>
   </tableLayout>
  </contents>
  </pageLayout>
</contents>
</form>
...Then in its Action class I have:
public void onLogin(DataActionContext ctx)
    //ctx.getBindingContainer();
    HttpServletRequest r = ctx.getHttpServletRequest();
    String userName = r.getParameter("username");
    String password = r.getParameter("password");
    // username and password required
    if (userName.length()==0 || password.length()==0)
      ctx.setActionForward("loginFailed");
      return;
try
      // Get handle to Application Module that "carries" Staff View
      DCDataControl dc = ctx.getBindingContext().findDataControl("AppModuleDataControl");
      ApplicationModule am = dc.getApplicationModule();
      // find the Staff view object that holds username and password
      ViewObject vo = am.findViewObject("StaffView1");
      //find user
      Row[] userRow = vo.getRowSet().getFilteredRows("StaffId",userName.toUpperCase());
      System.out.println(" I never get here!?!?!!!!!");
  catch (Exception ex)
      //Set Main Error Page here
      System.out.println(ex.toString());
      ctx.setActionForward("loginFailed");
      return;
}Seems like Row[] userRow = vo.getRowSet().getFilteredRows("StaffId",userName.toUpperCase());
is not properly executed?!?
Anybody know what the problem is??? This is based on Frank's code sample that I found on forum.