Chapter 4. Programmatic Security
Topics in This Chapter
- Combining Container-Managed and Programmatic Security
- Using the
isUserInRole method
- Using the
getRemoteUser method
- Using the
getUserPrincipal method
- Programmatically controlling all aspects of security
- Using SSL with programmatic security
Chapter 3 (Declarative Security) introduced two fundamental aspects of Web application security:
- Preventing unauthorized users from accessing sensitive data. This process involves access restriction (identifying which resources need protection and who should have access to them) and authentication (identifying users to determine if they are one of the authorized ones). Simple authentication involves the user entering a username and password in an HTML ...