I you don't use a framework that provides some facilities for this and the
system is not to big, here is a simple idea:

1. Use a servlet to perform the login. This servlet puts an object into the
users session (e.g. "login_performed")
2. All other servlets check the presence of this session parameter and grant
access to the pages only if it is there.

-Henning

"Meng, Dong J (CAP, CDI)" wrote:

> Hi:
>
> I want to create a secure area on the Intranet that can be accessed only by
> employees with a valid user name and password. The secure area can be used
> to store documents that cannot/should not be made accessible to all
> employees. Do you have any ideas how to make this work?
>
> Thanks.
>
> DJ
>
> ___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
begin:vcard
n:Brune;Henning
tel;fax:+49 (0)5 21/1 06-64 40
tel;work:+49 (0)5 21/1 06-29 48
x-mozilla-html:FALSE
org:Universitaet Bielefeld;Technische Fakultaet, AG TI
adr:;;Postfach 100131;Bielefeld;NRW;33501;Germany
version:2.1
email;internet:[EMAIL PROTECTED]
title:Dipl.-Inform.
fn:Henning Brune
end:vcard

Reply via email to