System and method for providing java server page security

1. A method for providing Java Server Page (JSP) security, comprising:

selecting a JSP file at least partially in response to a request by a user, the request including information identifying the user;

locating for the selected JSP file a security tag associated with at least a portion of the JSP file;

determining authorization of the user to access at least the portion of the JSP file based on the security tag; and

generating at least one web page based, at least in part, on the determination.

2. The method of claim 1 , further comprising determining authorization of the user to access at least the portion of the JSP file based on a role associated with the user.

3. The method of claim 1 , further comprising denying access to the portion of the JSP file associated with the security tag and generating the web page based on the remainder of the JSP file to the user.

4. The method of claim 1 , further comprising granting access to the portion of the JSP file associated with the security tag and generating the web page including the portion of the JSP file.

5. The method of claim 1 , wherein the security tag associated with a portion of the JSP file and comprises a resource ID and the method further comprising invoking an application program interface (API) comprising class definitions for security management functions.

6. The method of claim 5 , further comprising generating a security servlet based on the API and operable to grant or deny access to the portion of the JSP associated with the security tag.

7. The method of claim 6 , further comprising:

passing the resource ID to the security servlet; and

denying access to the portion of the JSP file associated with the security tag based on the resource ID and the information identifying the user.

8. The method of claim 1 , further comprising:

storing a plurality of roles associated with the user in a database, each role associated with a role profile including a plurality of resource privileges;

accessing the resource privileges based on the plurality of roles associated with the user of the database; and

determining authorization of the user to access at least the portion of the JSP file based on the resource privileges.

9. The method of claim 8 , further comprising denying access to at least a portion of the JSP file based on the accessed resource privileges and the resource ID.

10. The method of claim 9 , further comprising changing resource privileges associated with at least one role.

11. A computer readable storage medium storing computer executable instructions for providing JSP security, the instructions operable when executed to:

select a JSP file at least partially in response to a request by a user, the request including information identifying the user;

locate for the selected JSP file a security tag associated with at least a portion of the JSP file;

determine authorization of the user to access at least the portion of the JSP file based on the security tag; and

generate at least one web page based, at least in part, on the determination.

12. The computer readable storage medium of claim 11 , further operable to determine authorization of the user to access at least the portion of the JSP file based on a role associated with the user.

13. The computer readable storage medium of claim 11 , further operable to deny access to the portion of the JSP file associated with the security tag and generate the web page based on the remainder of the JSP file to the user.

14. The computer readable storage medium of claim 11 , further operable to grant access to the portion of the JSP file associated with the security tag and generate the web page including the portion of JSP file.

15. The computer readable storage medium of claim 11 , wherein the security tag comprises a resource ID and the software further operable to invoke an API comprising class definitions for security management functions.

16. The computer readable storage medium of claim 15 , further operable to generate a security servlet based on the API, the security servlet operable to grant or deny access to the portion of the JSP associated with the security tag.

17. The computer readable storage medium of claim 16 , further operable to:

pass the resource ID to a security servlet; and

deny access to the portion of the JSP file associated with the security tag based on the resource ID.

18. The computer readable storage medium of claim 11 , further operable to:

store a plurality of roles associated with the user in a database, each role associated with a role profile including a plurality of resource privileges;

access the resource privileges based on the plurality of roles associated with the user of the database; and

determine authorization of the user to access at least the portion of the JSP file based on the resource privileges.

19. The computer readable storage medium of claim 18 , further operable deny access to at least a portion of the JSP file based on the accessed resource privileges and the resource ID.

20. The computer readable storage medium of claim 19 , further operable to change resource privileges associated with at least one role.

21. A system for providing JSP security, comprising:

memory operable to store information associated with a plurality of JSP files and information associated with a user of a client; and

one or more processors operable to:

select a JSP file at least partially in response to a request by a user, the request including information identifying the user;

locate for the selected JSP file a security tag associated with at least a portion of the JSP file;

determine authorization of the user to access at least the portion of the JSP file based on the security tag; and

generate at least one web page based, at least in part, on the determination.

22. The system of claim 21 , the one or more processors further operable to determine authorization of the user to access at least the portion of the JSP file based on a role associated with the user.

23. The system of claim 21 , wherein the security tag is associated with a portion of the JSP file and the one or more processors further operable to deny access to the portion of the JSP file associated with the security tag and generate the web page based on the remainder of the JSP file to the user.

24. The system of claim 21 , wherein the security tag is associated with a portion of the JSP file and the one or more processors further operable to grant access to the portion of the JSP file associated with the security tag and generate the web page based on the entire JSP file.

25. The system of claim 21 , wherein the security tag is associated with a portion of the JSP file and comprises a resource ID and the one or more processors further operable to invoke an API comprising class definitions of security management functions.

26. The system of claim 25 , the one or more processors further operable to generate a security servlet based on the API, the security servlet operable to grant or deny access to the portion of the JSP associated with the security tag.

27. The system of claim 26 , the one or more processors further operable to:

pass the resource ID to a security servlet; and

deny access to the portion of the JSP file associated with the security tag based on the resource ID.

28. The system of claim 21 , the memory further operable to store a plurality of roles associated with the user in a database, each role associated with a role profile including a plurality of resource privileges and the one or more processors further operable to:

access the resource privileges based on the plurality of roles associated with the user of the database; and

determine authorization of the user to access at least the portion of the JSP file based on the resource privileges.

29. The system of claim 28 , the one or more processors further operable deny access to at least a portion of the JSP file based on the accessed resource privileges and the resource ID.

30. The system of claim 29 , the one or more processors further operable to change resource privileges associated with at least one role.

31. A method for providing JSP security, comprising:

selecting a JSP file at least partially in response to a request by a user, the request including information identifying the user, the JSP file comprising a portion of the JSP file with an associated security tag and a remainder of the JSP file, the security tag comprising a resource ID;

storing a plurality of roles associated with the user in a database, each role associated with a role profile including a plurality of resource privileges;

accessing the resource privileges based on the plurality of roles associated with the user of the database;

denying access the portion of the JSP file based on the accessed resource privileges and the resource ID; and

dynamically generating a web page based on the remainder of the JSP file.

32. A system for providing Java Server Page (JSP) security, comprising:

means for selecting a JSP file at least partially in response to a request by a user, the request including information identifying the user;

means for locating for the selected JSP file a security tag associated with at least a portion of the JSP file;

means for determining authorization of the user to access at least the portion of the JSP file based on the security tag; and

means for generating at least one web page based, at least in part, on the determination.