Yes, there is something similar: http://tomcat.apache.org/tomcat-5.5-doc/config/valve.html
Take a look at RemoteAdressFilter and RemoteHostFilter. They grant access depending on the IP / adress. However, you will have to write your own filter to accomplish what you want. Taking a look ath the source-code of this filter might help. BUT: Since a filter can only evaluate information stored in the http-request, I'm not sure if it can be done, since the user is IMHO not part of the http-request. Just take a look at the sources, maybe they give you some ideas. Happy holidays! Greg -- what's puzzlin' you, is the nature of my game gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]