Restricting access to a particular servlet in Weblogic

Question

Thanx in advance for reading and replying to this query.
I have an application running under a domain.
This application has two servlets.
I want that whenever a user hits one servlet, weblogic's authentication window should pop up.
I know this could be achieved by making entry for <security-constraint >.
But how?
Please advise.
Regards,
Vikas

Answer 1

in your web.xml where /MyServletURL is the url that you mapped your servlet to:
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>Weblog3</web-resource-name>
      <description>
        Test of web application security
      </description>
      <url-pattern>/MyServletURL</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <description>
        These are the roles who have access
      </description>
        <role-name>
          webappRole1
        </role-name>
    </auth-constraint>
    <user-data-constraint>
      <description>
        This is how the user data must be transmitted
      </description>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <login-config>
    <auth-method>BASIC</auth-method>
  </login-config>
  <security-role>
    <description>
      An administrator
    </description>
    <role-name>
      webappRole1
    </role-name>
  </security-role>Then in the weblogic.xml file where cust is a group that you have created in Weblogic using the console. You can then assign users to the group so that they can access the servlet:
<weblogic-web-app>
   <security-role-assignment>
      <role-name>webappRole1</role-name>
      <principal-name>cust</principal-name>
   </security-role-assignment>
</weblogic-web-app>