Role control of web-based administration system

Hi guys,

I am going to build a small web-based administration system using jsp and mysql,which can be used for different people,from manager to ordinary staff.everyone has its own right to do its own thing.

Say,the manager has whole rights.He can do anything he likes,like add new people,arrange rights,delete people,and so on.Meanwhile,the ordinary staff could only obey the rihgts entitled by the manager.

Does anybody has some experience in this area? How to achieve this goal?

Any ideas is welcome!

Plus,if I wanna build a robust system,is there any good book ?

Thanks very very much!

[631 byte] By [truehhha] at [2007-10-3 0:09:37]
# 1

Put permissions in the database.

Store user name and 'logged in' status in a session variable.

When a user access a protected page, lookup the users permissions from the database. If they do not have permission, redirect them to another page.

Standard stuff, you should be able to find tutorials / code searching this forum or using google.

angrycata at 2007-7-14 16:58:48 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...