Hi! Most of web application´s security depends of the contanier. If you're using Tomcat exists some authentication - autoritation methods. Form based authetication is the most easy, and cliente certificate I think is very powerful.
This security features (security constraints) where configured at web.xml file. Next, you must make a relationship between some realm (JDBC, a xml file...) and the authentication methos (it includes users & roles). And finally will be some Struts actions to call the validation. There are infinity of Internet examples at all. Regards Luis Urueña Frías Oficina 101 Edificio Galileo, módulo Rojo Parque Tecnológico de Boecillo Valladolid - España --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]