29.01.2013 Views

WebSphere Application Server - IBM Redbooks

WebSphere Application Server - IBM Redbooks

WebSphere Application Server - IBM Redbooks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Tip: If a servlet is called using some type of redirection on the server side,<br />

security will be bypassed. A good example is the front controller created by the<br />

Database Web Pages wizard. Let us say you used the wizard to create the<br />

following:<br />

► ListCatalogInputForm.html<br />

► ListCatalogController.class<br />

► ListCatalogMasterView.jsp<br />

► ListCatalogDetailsView.jsp<br />

The user starts with ListCatalogInputForm.html where the following code is<br />

used to invoke ListCatalogMasterView.jsp (via ListCatalogController.class):<br />

<br />

You must secure ListCatalogController.class in order to get an authentication<br />

challenge.<br />

Figure 16-7 Add the servlets and methods to protect<br />

In this case it is sufficient to select the GET and POST methods, but it does<br />

not hurt to specify all of them.<br />

Click OK.<br />

Chapter 16. Security 563

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!