Welcome to Hogwarts!

This is a Defense Against the Dark Arts example of using JSP/Servlet security. Tutorial documentation is available.

Try doing a login

To get a better understanding of how security works, try using the following links both when you are logged in and when you are not.

All of the links are in secure areas. If you are not logged in a login procedure is put in by Resin before you get to the pages. If you are logged in, you may be able to see them or you may get a 'Forbidden' error.

Links to different areas:

Students (available to 'students' and 'professors')
Professors (available to 'professors')
Staff (available to 'staff' and 'professors')

In a real application, you wouldn't show links like this -- you would get the user to login first and then only display the links that are available for their role.

documentation for this example