System and method for providing java server page security
AssigneeComputer Associates Think, Inc.
InventorsTom Chen, Anthony Piccirilli
Life of this patent
Estimating the term…
Abstract
A system and method for providing Java Server Page (JSP) security are provided. In one embodiment, a method for providing JSP security comprises selecting a JSP file at least partially in response to a request by a user. The request includes information identifying the user. A security tag associated with at least a portion of the JSP file is located for the selected JSP file. Authorization of the user to access the portion of the JSP file is determined based on the security tag. At least one web page is generated based, at least in part, on the determination.
Claims32
A method for providing Java Server Page (JSP) security, comprising:
- selecting a JSP file at least partially in response to a request by a user, the request including information identifying the user;
- locating for the selected JSP file a security tag associated with at least a portion of the JSP file;
- determining authorization of the user to access at least the portion of the JSP file based on the security tag;
- and
- generating at least one web page based, at least in part, on the determination.
A computer readable storage medium storing computer executable instructions for providing JSP security, the instructions operable when executed to:
- select a JSP file at least partially in response to a request by a user, the request including information identifying the user;
- locate for the selected JSP file a security tag associated with at least a portion of the JSP file;
- determine authorization of the user to access at least the portion of the JSP file based on the security tag;
- and
- generate at least one web page based, at least in part, on the determination.
A system for providing JSP security, comprising:
- memory operable to store information associated with a plurality of JSP files and information associated with a user of a client;
- and
- one or more processors operable to:
- select a JSP file at least partially in response to a request by a user, the request including information identifying the user;
- locate for the selected JSP file a security tag associated with at least a portion of the JSP file;
- determine authorization of the user to access at least the portion of the JSP file based on the security tag;
- and
- generate at least one web page based, at least in part, on the determination.
A method for providing JSP security, comprising:
- selecting a JSP file at least partially in response to a request by a user, the request including information identifying the user, the JSP file comprising a portion of the JSP file with an associated security tag and a remainder of the JSP file, the security tag comprising a resource ID;
- storing a plurality of roles associated with the user in a database, each role associated with a role profile including a plurality of resource privileges;
- accessing the resource privileges based on the plurality of roles associated with the user of the database;
- denying access the portion of the JSP file based on the accessed resource privileges and the resource ID;
- and
- dynamically generating a web page based on the remainder of the JSP file.
A system for providing Java Server Page (JSP) security, comprising:
- means for selecting a JSP file at least partially in response to a request by a user, the request including information identifying the user;
- means for locating for the selected JSP file a security tag associated with at least a portion of the JSP file;
- means for determining authorization of the user to access at least the portion of the JSP file based on the security tag;
- and
- means for generating at least one web page based, at least in part, on the determination.
Dependencies are inferred from the claim text.