JAAS restrict web page access

Hi,

I am planning to implement JASS autherization in my web application.

1. I want to restrict the role to access few certain jsp, servlet pages. What entry should i make in policy file, so that when the role tries to access that jsp file, it should automatically redirect user to some different jsp page.

2. I want to have some Access Control List in authorization, so that the logged in user has access to certain functions, product etc. How can i take help of JAAS.

I can created my own custom ACL and put the same in session. How its different from JAAS.

Thanks

Vinayak

[619 byte] By [vinayakat080a] at [2007-10-1 11:22:14]