Java portlet customization depending user in a group

Question

Hi
I have developped a Java portlet with a customization display, depending user belongs a specific OID group or not.
I used a preparedStatement to call the wwsec_api.is_user_in_group PL/SQL procedure.
My problem is that it seems that OID does not close connections as our portal falls after 2 or 3 days when I install this portlet in production.
Therefore I wonder if there is a bug in the API wwsec_api.is_user_in_group (if it close OID connection after returning the boolean result).
Is there a more efficient way in a Java portlet to check if a user belongs an OID group ?
Is there a bug in wwsec_api.is_user_in_group ?
Thanks for your help,
Best Regards,
Jean-Christophe

Answer 1

We used Java JNDI API's to check if a user was in a group, but were unable to get what are the list of groups the user is a memeber of.,
   * Checks if the specified userDN is a member of the specified groupDN.
   * @param userDN  Distinguished name of the user
   * @param groupDN Distingushed name of the group
   * @return  true - if the user belongs to the group, else false
   * @exception NamingException if any directory operation fails
  public boolean isUserInGroup(String userDN,String groupDN)
    throws NamingException {
    boolean ingroup = false;
    // Filter to check if the user DN is a member
    // A user is a member of a group if the uniqueMember attribute of that group entry
    // has the user DN value.
    String filter = "(uniqueMember="+userDN+")";
    // Initialize search controls to search with scope as sub tree
    SearchControls searchControls = new SearchControls();
    searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE) ;
    // Set the attributes to be returned
    searchControls.setReturningAttributes(new String[]{"cn"});
    // Search under the specified group
    NamingEnumeration  results = dirctx.search(groupDN, filter, searchControls);
    // If the search has results, then the user is a member
     if (results.hasMore()) {
         ingroup = true;
     }  // else user not present, i.e defaulted
     return ingroup;
  }Regards
Elango.