Managing and securing manageable resources in stateless web server architecture using servlet filters

A computer program product for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:

• a computer-readable, storage memory device;
• and
• program instructions embodied by the computer-readable, storage memory device for causing a computer processor to perform steps comprising:
• extracting, by a computer, a request pattern from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
• mapping, by the computer, at least a portion of the extracted request pattern to one or more application program components, wherein the mapping comprises mapping according to one or more assigned security constraints, and wherein at least one security constraint comprises at least the portion of the extracted request pattern;
• and
• responsive to the mapping, performing, by the computer, security access to the one or more application program components, wherein different attributes are represented by respective resource locators within the extracted request pattern, and wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory;
• thereby providing improved administration of computer resources in the stateless web server independent of rules of a central administration unit.

A system for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:

• a computer processor;
• a computer-readable, storage memory device communicably disposed to the computer processor;
• and
• program instructions embodied by the computer-readable, storage memory device for causing the computer processor to perform steps comprising:
• extracting, by a computer, a request pattern from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
• mapping, by the computer, at least a portion of the extracted request pattern to one or more application program components, wherein the mapping comprises mapping according to one or more assigned security constraints, and wherein at least one security constraint comprises at least the portion of the extracted request pattern;
• and
• responsive to the mapping, performing, by the computer, security access to the one or more application program components, wherein different attributes are represented by respective resource locators within the extracted request pattern, and wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory;
• thereby providing improved administration of computer resources in the stateless web server independent of rules of a central administration unit.