OC4J Security

Question

Hi,
I am using OC4J to set up a basic authentication mode (using security constraints in web.xml) with an LDAP server and everything is working fine.
In the application i am retrieving the logged user name by using the API:
request.getUserPrincipal().getName()
is it somehow possible to retrieve the logged user's role, i need it to set up the JSP page (i.e buttons etc. according to the logged user's role)
Thanks,
Rocky

Answer 1

Hi,
I am using OC4J to set up a basic authentication
mode (using security constraints in web.xml) with an
LDAP server and everything is working fine.
In the application i am retrieving the logged user
name by using the API:
request.getUserPrincipal().getName()
is it somehow possible to retrieve the logged user's
role, i need it to set up the JSP page (i.e buttons
etc. according to the logged user's role)
Thanks,
RockyNot that I know of -- this is standard Servlet API stuff and I don't recall seeing any form of extension we've provided.
You can check to see if the user is in a specific role using the boolean request.isUserInRole(String role) method.
It's kind of ugly but using it you should be able to build up a little helper on your own to handle this problem and perform the check you need to do and determine what role the user is in based on your known set of logical roles.
-steve-