Design

The Financial Brokerage Service(FBS) controls access to application features by displaying user interfaces based on user roles. For example, Corporate Users can access pages that enable them to set up ESOP (Employee Stock Option Plan) accounts for employees, but Individual Users cannot. The FBS applies a filter to process user requests and return the appropriate pages. Using filters, you can add this kind of access control to a JSP-based application without touching the existing code.

This filter-based access control model is flexible, too, because the data that maps user roles to specific JSPs is stored in an XML file. As a result, you can modify mappings and leave the application in place—there's no need to recompile or redeploy.