Chapter 8. Programmatic Security

Topics in This Chapter

  • Combining container-managed and programmatic security

  • Using the isUserInRole method

  • Using the getRemoteUser method

  • Using the getUserPrincipal method

  • Programmatically controlling all aspects of security

  • Using SSL with programmatic security

Chapter 7 introduced two fundamental aspects of Web application security:

  1. Preventing unauthorized users from accessing sensitive data. This process involves access restriction (identifying which resources need protection and who should have access to them) and authentication (identifying the user to determine if they are one of the authorized ones). This aspect applies to virtually all secure applications; even intranets at locations with physical access controls ...

Get More Servlets and JavaServer Pages™ now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.