URL in Role?

Question

Is it possible to determine the role to which a URI has been mapped in the
security-constraint element in web.xml?
ie: given the security constraint element below, is their a weblogic
function/API that can be called as follows
getRoleForURI("/cust/balance.jsp") which would return "customerBankingRole"
<security-constraint>
<web-resource-collection>
<web-resource-name>banking</web-resource-name>
<url-pattern>/cust/balance.jsp</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>customerBankingRole</role-name>
</auth-constraint>
</security-constraint>

Answer 1

Neil,
Thanks for your reply.
We are using the RDBMSRealm and want to dynamically hide/show links on our
site depending on whether the logged in user has access to the particular
URL.
I have been debugging the RDBMSRealm. When a link is clicked on our site the
role(s) that the URL has been assigned in our webapp are passed to the
RDBMSRealm, not the URL itself. Therefore Weblogic must be making the link
between URL and role internally.
I was hoping the mechanism that WebLogic uses internally would be available
to developers for the reason mentioned above.
Brent.
"Neil Smithline" <[email protected]> wrote in message
news:[email protected]..
No. There is no such call (incidentally it would have to return a
collection of roles as there can be multiple).
I'm wondering what would you use it for. Are you using programmatic
security and trying to parse this information yourself?
--- Neil
Neil Smithline
WLS Security Team
BEA Systems
"Brent Burgess" <[email protected]> wrote in message
news:[email protected]..
Is it possible to determine the role to which a URI has been mapped in
the
security-constraint element in web.xml?
ie: given the security constraint element below, is their a weblogic
function/API that can be called as follows
getRoleForURI("/cust/balance.jsp") which would return"customerBankingRole"
<security-constraint>
<web-resource-collection>
<web-resource-name>banking</web-resource-name>
<url-pattern>/cust/balance.jsp</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>customerBankingRole</role-name>
</auth-constraint>
</security-constraint>