Authorization at Weblogic 10.3.4/5

Question

I deploy an application which has lots of web pages.
Page 1: login
Page 2: product list
Page 3: staff list
What I want to do is setting new authorization.
Staff A, B, C can login to this application.
Staff A can view Page 1 and 2
Staff B can only vew Page 1
Staff C can only view Page 2
Can I set new authentication in weblogic ?

Answer 1

You can create a web-project with has multiple directory in which the different pages are placed, for example,
public_html/products in which you place the product list page
public_html/staff in which you place the staff page
Now by using declarative security we can define the following in the web.xml deployment descriptor, for example,
<web-app ...>
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>porducts</web-resource-name>
            <url-pattern>products/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>STAFF_A</role-name>
            <role-name>STAFF_B</role-name>
        </auth-constraint>
        <user-data-constraint>
            <transport-guarantee>NONE</transport-guarantee>
        </user-data-constraint>
    </security-constraint>
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>staff</web-resource-name>
            <url-pattern>staff/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>STAFF_A</role-name>
            <role-name>STAFF_C</role-name>
        </auth-constraint>
        <user-data-constraint>
            <transport-guarantee>NONE</transport-guarantee>
        </user-data-constraint>
    </security-constraint>
    <login-config>
        <auth-method>FORM</auth-method>
        <form-login-config>
            <form-login-page>/login.jspx</form-login-page>
            <form-error-page>/login.jspx</form-error-page>
        </form-login-config>
    </login-config>
    <security-role>
        <role-name>STAFF_A</role-name>
    </security-role>
    <security-role>
        <role-name>STAFF_B</role-name>
    </security-role>
     <security-role>
        <role-name>STAFF_C</role-name>
    </security-role>
</web-app>A good introduction to using the web.xml deployment descriptor can be found here: http://code.google.com/appengine/docs/java/config/webxml.html