Re: 'anonymous' role

2004-04-03 Thread Bill Siggelkow
You are essentialy correct, Mohan. CMA is not come into play unless the user attempts access to a protected resource. One thing you could do was assume that if 'getUserPrincipal()' returns null then the user has not logged in and is therefore in the 'anonymous' role. If you want more flexibil

Re: 'anonymous' role

2004-04-03 Thread Adam Hardy
On 04/03/2004 01:56 PM MOHAN RADHAKRISHNAN wrote: Hi In our current CMA implementation for role check , we have an 'anonymous' role. Now this role is supposed to work without logging into the application. Do you have any idea how to implement this ? As far as I know there is no CMA w