TechTip: Handle Security Profile Logging

Security - Other
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times
Here's a quick overview of a simple method to handle security profile logging: Have a JSP called Logon.jsp. Your home page will have a link to Logon.jsp. Logon.jsp will prompt for profile and password and then validate. If valid, you create a LogonClass object:

public class Logon {
public String profile;
public String password;
public Logon (String profile, password) {
this.profile = profile;
this.password = password;
}
}


Stuff that instance into the session object:

<%
String profile = request.getParameter("profile");
String password = request.getParameter("password");
Logon log = new Logon(profile, password);
session.setAtrribute("logon", log);
%>


The Logon.jsp redirects to your home page.

Every page that requires logon info will have the following code:

<%
Logon log = (Logon)session.getAttribute("logon");
if (log == null) {
%>

<% }     %>


If the Logon object is successfully retrieved from the session context, your JSP will have access to the profile and password:


<%
String profile = log.profile;
String password = log.password;
%>


And your JDBC calls or whatever can use it.

For a more robust Logon example, look at the example application that comes with Jakarta's Struts.

--Don Denoncourt
This email address is being protected from spambots. You need JavaScript enabled to view it.


Don Denoncourt

Don Denoncourt is a freelance consultant. He can be reached at This email address is being protected from spambots. You need JavaScript enabled to view it..


MC Press books written by Don Denoncourt available now on the MC Press Bookstore.

Java Application Strategies for iSeries and AS/400 Java Application Strategies for iSeries and AS/400
Explore the realities of using Java to develop real-world OS/400 applications.
List Price $89.00

Now On Sale

BLOG COMMENTS POWERED BY DISQUS

LATEST COMMENTS

Support MC Press Online

$

Book Reviews

Resource Center

  •  

  • LANSA Business users want new applications now. Market and regulatory pressures require faster application updates and delivery into production. Your IBM i developers may be approaching retirement, and you see no sure way to fill their positions with experienced developers. In addition, you may be caught between maintaining your existing applications and the uncertainty of moving to something new.

  • The MC Resource Centers bring you the widest selection of white papers, trial software, and on-demand webcasts for you to choose from. >> Review the list of White Papers, Trial Software or On-Demand Webcast at the MC Press Resource Center. >> Add the items to yru Cart and complet he checkout process and submit

  • SB Profound WC 5536Join us for this hour-long webcast that will explore:

  • Fortra IT managers hoping to find new IBM i talent are discovering that the pool of experienced RPG programmers and operators or administrators with intimate knowledge of the operating system and the applications that run on it is small. This begs the question: How will you manage the platform that supports such a big part of your business? This guide offers strategies and software suggestions to help you plan IT staffing and resources and smooth the transition after your AS/400 talent retires. Read on to learn: