How to list all security roles associated to a servlet or JSP?
843835Nov 27 2002 — edited Nov 28 2002Hi!
I would like to list all security roles that are permitted to access JSP. I don't want to parse web.xml, I would like to call some API and get an enumeration of security roles...
I need this in order to develop a custom include tag. In this include tag I would like to enumerate all security roles and see whether the caller is in one of these roles. If the user is in the right role for invoking the included JSP it will be included otherwise it will be not.
The problem is in that include of JSPs that are protected in the JSPs that are not protected neglects the security settings of included JSPs...
Are there any other strategis to overcome this problem?
Thank you.
Kind regards,
Klemen.