Re: 'anonymous' role

[Bill Siggelkow]

You are essentialy correct, Mohan.  CMA is not come into play unless the 
user attempts access to a protected resource.  One thing you could do 
was assume that if 'getUserPrincipal()' returns null then the user has 
not logged in and is therefore in the 'anonymous' role.

If you want more flexibility and still want to use the "isUserInRole" 
method you might want to look into Security Filter 
(http://securityfilter.sourceforge.net).
MOHAN RADHAKRISHNAN wrote:
Hi
       In our current CMA implementation for role check , we have an
'anonymous' role. Now this role is supposed to work without logging into the
application. Do you have any idea how to implement this ?
        As far as I know there is no CMA without logging in and so I have to
block the call in the filter and duplicate lot of code and divert the hit.
Any ideas ?

Mohan


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]