Newbie not sure how to strict users access to web pages base

alyssak May 23, 2009 4:41 AM

Hi everyone,

I'm creating a web portal using jboss and hibernate. Wondering what the best approach is to control user access within the site, i.e. i dont want to make pages visable that they shouldn't have access to.

I've been reading on the internet about cookies stored on the jsp page to store user details, but I'm not sure about that.

I would appreciate your advice.

Regards, Alyssa.

1. Re: Newbie not sure how to strict users access to web pages

peterj May 24, 2009 10:41 PM (in response to alyssak)

Web portal? Using a specific portal server such as JBoss Portal? Or do you mean simply web page for your application?
Actions
2. Re: Newbie not sure how to strict users access to web pages

alyssak May 25, 2009 10:00 PM (in response to alyssak)

Hi,

No not using jboss webportal, using the jboss application server.

Sorry for the confusion, yes I was referring to the web pages (.jsp) of my application.
Actions
3. Re: Newbie not sure how to strict users access to web pages

peterj May 26, 2009 11:19 AM (in response to alyssak)

Then you need to read about web app security. Read chapters 7 and 8 of More Servlets and JSPs: http://pdf.moreservlets.com/
Actions

Go to original post