IBM WebSphere V5.0 Security - CGISecurity

Any other Web component can access the object during the session to getthe attribute.Part of the Java code for PostLoginFilter represents the steps describedabove.Example 4-6 PostLoginFilter sample codepublic void doFilter(ServletRequest request,ServletResponse response,FilterChain chain)//.....// Create attribute in HttpSession object and set its value to "UNDEFINED"HttpSession session = ((HttpServletRequest) request).getSession();session.setAttribute("userTYPE", "UNDEFINED");//let the j_security_check to do it's workchain.doFilter(request, response);//.....//perform LDAP retrievaluserLDAPAttributes = new LDAPAttr(cfg_server, cfg_port, cfg_basedn);userLDAPAttributes.SetUser(userName, cfg_attr);if (userLDAPAttributes.RetrieveLDAPAttributes() == 0) {user_attr = userLDAPAttributes.GetUserAttr();//Update session object attributesession.setAttribute("userTYPE", user_attr);System.out.println("Attrbute in the session object was set to: "+ (session.getAttribute("userTYPE")).toString());else {filterConfig.getServletContext().log("Problems retrieving attributes for " + userName);}//.....In the filter source code, extensive comments have been provided in order toclearly explain the filter behavior. Please refer to the filter code in theapplication for more information.Filter configurationWe have used WebSphere Studio Application Developer to install and configurethe filter in the Web deployment descriptor.1. Open the Web deployment descriptor in WebSphere Studio.2. Select the Filters tab and click Add under the Filters section. The Filter TypeSelection windows should be opened.Chapter 4. Securing Web components 65