You should be able to code a filter to do this.
Thanks Adrian !! It works !! But this means that i need to do this additional database lookup to retrieve the remaining data, in addition to the DatabaseServerLoginModule's own lookup (rite?).
Any other way to do this in one go ?
the request object has the basic data (remote_user) and can tell you if the user is in the required role.
Other data is still in the DB I am afraid...as these are just additional fields you put for your applicatiion (I guess)
I attach a jsp snippet for dumping request data out, and you can see some user data there.