Do we have a preprocessor or interceptor layer in ADF 11g?

Question

Hi,
I am working on JDev 11g and ADF 11g.
For my project we have provided a login screen. Now I want the logged user to be authenticated and authorized.
This has to be done through the tables/values available in database [oracle 10g] and NOT declaratively.
For this, I want to have a preprocessor OR Interceptor layer that will do the required authentication and authorization. So now based on the output of this layer I will show the result to the user.
Want to know
1. How can this be achieved in ADF?
2. What steps should I follow
3. Are there any limitations that I need to be aware of?
Thanks in advance.

Answer 1

.. to add to the previous answer
- you can authenticate users against a database infrastrcuture using WLS. User names and roles can be added to the privileges of the authenticated users this way. Using ADF Security, JAAS permissions are declaratively added to application roles, which are mapped to user roles. This way the framework does it all for you
- if you want to implement custom security, no standard security, the you have various hookpoints to use
1) PageLifecycle customization - checks on teh PageDef level in ADF if users are allowed to access this apge. For this you would need to know about the requires access permission and look it up in your database tables
2) ServletFilter - handle the incoming request first and determine if the request is for a protected resources
3) Task Flow initializer method / method call activity - check authorization on task flow entry
4) PhaseListeners - similar to servlet, check the incoming request for authorized resource access
5) Use managed beans and EL on pages to show/hide content
As you see, using ADF Security is a lot easier to use than a hand crafted solution. However, its possible
Please see the Fusion developer guide documentation for more infromation about lifecycle handling and customization
Frank