More than one role for Java EE user?

Question

Can a user be assigned more than one role in Java EE/Java? Like a user can be administrator and reporting-user at the same time. Both user roles can access the same resources but the admin can also access admin pages.

score 1 · Accepted Answer · edited Dec 26 '12 at 12:33

1

Yes, the roles can overlap in Java EE. You can dictate this by providing different realms for the same user that lets a user access different roles at once. The procedure for creating this varies according to the application server that you are using, but the basic concept behind this authentication remains the same.

edited Dec 26 '12 at 12:33

Arjan Tijms

37,782
12
108
140

answered Dec 26 '12 at 11:22

Sumit Bisht

1,507
1
16
31

score 1 · Answer 2 · answered Dec 26 '12 at 12:39

Yes, a user (caller principal) in Java EE can have zero, one or more roles. There is no need for multiple realms/auth modules/zones or whatever the proprietary terminology a specific server uses.

Specifically, something like HttpServletRequest#isUserInRole can return true for roles 'foo' and 'bar' for the same user.

More than one role for Java EE user?

2 Answers2