This is a discussion on WAS v6 : custom register: mapped groups with roles - Websphere ; I have an application that use the J2EE Form Based Authentication, and I use custom register using oracle table to store information about users,passwords and roles, this application use this jsp (index.jsp) to redirect the user according to his role ...
I have an application that use the J2EE Form Based Authentication, and I use custom register using oracle table to store information about users,passwords and roles,
this application use this jsp (index.jsp) to redirect the user according to his role
<%@ page import="java.security.Principal"%>
<%
Principal principal = request.getUserPrincipal();
System.err.println("principal :"+principal);
if(principal == null) {
response.sendRedirect("/context/error.jsp");
}
else{
if (request.isUserInRole("A"))
response.sendRedirect("/appregister/add/add.jsp");
else if (request.isUserInRole("B"))
response.sendRedirect("/appregister/seek/seek.jsp");
else if (request.isUserInRole("C"))
response.sendRedirect("/appregister/modify/modify.jsp");
else
response.sendRedirect("/appregister/");
}
%>
During the deployment proccess in websphere application server v6, I have mapped the reals users to the role that are in ?index.jsp? and ?web.xml?, and everything works well.
The probleme is when I map groups to the roles,and when I try to connect to the application with the user who belongs to a group that is mapped to one role (for exemle user1 in group1 that is mapped to role1), I have the following message : you are not allow to access ressource : ?Authorization failed, Not granted any of the required roles: A B C?
any idea please ?