On Fri, 25 May 2001, Jon.Ridgway wrote:
> Hi All,
>
> Is it possible to programmatically set a users role for use with
> request.isUserInRole (<role>). I would like to do this so I can started
> using the role based templating, without having to dig into app/web server
> specific security features.
>
> Any help much appreciated.
>
> Jon.
>
No, the values returned by isUserInRole() -- along with
getRemoteUser() and getUserPrincipal() -- are set by the servlet container
when you are using container-managed security.
Craig McClanahan