Managing and securing manageable resources in stateless web server architecture using servlet filters
Access is controlled to managed resources in a stateless web server architecture including a stateless web server computing platform; a resource locator map portion of the stateless web server computing platform providing a unique resource locator code representing each managed resource in a stateless web server architecture, wherein the managed resource is assigned to a plurality of application program components; a set of servlet filters disposed in a portion of the stateless web server computing platform, each servlet filter associated with one of the application program components; a resource locator matcher portion of the stateless web server computing platform, responsive to a user request to a unique resource locator, matching a pattern in the user request to one or more of the application program components using a corresponding servlet filter; and a request dispatcher portion of the stateless web server computing platform sending the user request to the matched application program component, wherein the application program component receives and processes the user request.
1. A computer-based method for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:
extracting a request pattern including at least a password value from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
mapping by a computer the extracted pattern to one or more application program components;
responsive to the mapping, performing by a computer fine-grained instance level security access to the application program component according to an assigned security constraint, wherein at least one security constraint comprises the extracted password associated with the role name, and wherein different security constraints are assigned to different unique resource locator patterns in each deployment descriptor of a stateless web server architecture; and
responsive to successful security access, sending by a computer to a requester a Uniform Resource Locator request to the mapped application program component;
thereby providing different security access conditions to different instances of a same managed resource, and providing password authentication according to the pattern extracted from the relative path portion of the Uniform Resource Locator request.
2. The computer-based method as set forth in claim 1 wherein the mapping is performed by one or more associated servlet filters.
3. The computer-based method as set forth in claim 1 wherein different attributes are represented by respective resource locators within the extracted request pattern.
4. The computer-based method as set forth in claim 1 wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory.
5. The computer-based method as set forth in claim 3 wherein security constraints for each attribute are stored in a web deployment descriptor disposed in computer storage memory.
6. A computer program product for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:
a computer-readable, storage memory device; and
program instructions embodied by the computer-readable, storage memory device for causing a computer processor to perform steps comprising:
extracting a request pattern including at least a password value from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
mapping by a computer the extracted pattern to one or more application program components;
responsive to the mapping, performing by a computer fine-grained instance level security access to the application program component according to an assigned security constraint, wherein at least one security constraint comprises the extracted password associated with the role name, and wherein different security constraints are assigned to different unique resource locator patterns in each deployment descriptor of a stateless web server architecture; and
responsive to successful security access, sending by a computer to a requester a Uniform Resource Locator request to the mapped application program component;
thereby providing different security access conditions to different instances of a same managed resource, and providing password authentication according to the pattern extracted from the relative path portion of the Uniform Resource Locator request.
7. The computer program product as set forth in claim 6 wherein the mapping is performed by one or more associated servlet filters.
8. The computer program product as set forth in claim 6 wherein different attributes are represented by respective resource locators within the extracted request pattern.
9. The computer program product as set forth in claim 6 wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory.
10. The computer program product as set forth in claim 8 wherein security constraints for each attribute are stored in a web deployment descriptor disposed in computer storage memory.
11. A system for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:
a computer processor;
a computer-readable, storage memory device communicably disposed to the computer processor; and
program instructions embodied by the computer-readable, storage memory device for causing the computer processor to perform steps comprising:
extracting a request pattern including at least a password value from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
mapping by a computer the extracted pattern to one or more application program components;
responsive to the mapping, performing by a computer fine-grained instance level security access to the application program component according to an assigned security constraint, wherein at least one security constraint comprises the extracted password associated with the role name, and wherein different security constraints are assigned to different unique resource locator patterns in each deployment descriptor of a stateless web server architecture; and
responsive to successful security access, sending by a computer to a requester a Uniform Resource Locator request to the mapped application program component;
thereby providing different security access conditions to different instances of a same managed resource, and providing password authentication according to the pattern extracted from the relative path portion of the Uniform Resource Locator request.
12. The system as set forth in claim 11 wherein the mapping is performed by one or more associated servlet filters.
13. The system as set forth in claim 11 wherein different attributes are represented by respective resource locators within the extracted request pattern.
14. The system as set forth in claim 11 wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory.
15. The system as set forth in claim 13 wherein security constraints for each attribute are stored in a web deployment descriptor disposed in computer storage memory.