Managing and securing manageable resources in stateless web server architecture using servlet filters
Access is controlled to managed resources in a stateless web server architecture including a stateless web server computing platform; a resource locator map portion of the stateless web server computing platform providing a unique resource locator code representing each managed resource in a stateless web server architecture, wherein the managed resource is assigned to a plurality of application program components; a set of servlet filters disposed in a portion of the stateless web server computing platform, each servlet filter associated with one of the application program components; a resource locator matcher portion of the stateless web server computing platform, responsive to a user request to a unique resource locator, matching a pattern in the user request to one or more of the application program components using a corresponding servlet filter; and a request dispatcher portion of the stateless web server computing platform sending the user request to the matched application program component, wherein the application program component receives and processes the user request.
1. A method for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:
in the stateless web server:
extracting, by a computer, a request pattern from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
mapping, by the computer, at least a portion of the extracted request pattern to one or more application program components, wherein the mapping comprises mapping according to one or more assigned security constraints, and wherein at least one security constraint comprises at least the portion of the extracted request pattern; and
responsive to the mapping, performing, by the computer, security access to the one or more application program components, wherein different attributes are represented by respective resource locators within the extracted request pattern, and wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory;
thereby providing improved administration of computer resources in the stateless web server independent of rules of a central administration unit.
2. The method as set forth in claim 1 wherein different security constraints are assigned to different extracted request patterns.
3. The method as set forth in claim 1 further comprising, responsive to the mapping, sending, by the computer to a requester, the Uniform Resource Locator request to the mapped application program component.
4. The computer-based method as set forth in claim 1 , wherein the mapping is performed by one or more associated servlet filters.
5. A computer program product for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:
a computer-readable, storage memory device; and
program instructions embodied by the computer-readable, storage memory device for causing a computer processor to perform steps comprising:
extracting, by a computer, a request pattern from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
mapping, by the computer, at least a portion of the extracted request pattern to one or more application program components, wherein the mapping comprises mapping according to one or more assigned security constraints, and wherein at least one security constraint comprises at least the portion of the extracted request pattern; and
responsive to the mapping, performing, by the computer, security access to the one or more application program components, wherein different attributes are represented by respective resource locators within the extracted request pattern, and wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory;
thereby providing improved administration of computer resources in the stateless web server independent of rules of a central administration unit.
6. The computer program product as set forth in claim 5 wherein different security constraints are assigned to different extracted request patterns.
7. The computer program product as set forth in claim 5 further comprising program instructions for, responsive to the mapping, sending, by the computer to a requester, the Uniform Resource Locator request to the mapped application program component.
8. The computer program product as set forth in claim 5 wherein the mapping is performed by one or more associated servlet filters.
9. A system for controlling fine-grained security access to managed resources in a stateless web server architecture comprising:
a computer processor;
a computer-readable, storage memory device communicably disposed to the computer processor; and
program instructions embodied by the computer-readable, storage memory device for causing the computer processor to perform steps comprising:
extracting, by a computer, a request pattern from a valid relative path portion of a validly-formatted Uniform Resource Locator request;
mapping, by the computer, at least a portion of the extracted request pattern to one or more application program components, wherein the mapping comprises mapping according to one or more assigned security constraints, and wherein at least one security constraint comprises at least the portion of the extracted request pattern; and
responsive to the mapping, performing, by the computer, security access to the one or more application program components, wherein different attributes are represented by respective resource locators within the extracted request pattern, and wherein the security constraints are stored in a web deployment descriptor disposed in computer storage memory;
thereby providing improved administration of computer resources in the stateless web server independent of rules of a central administration unit.
10. The system as set forth in claim 9 wherein different security constraints are assigned to different extracted request patterns.
11. The system as set forth in claim 9 further comprising program instructions for, responsive to the mapping, sending, by the computer to a requester, the Uniform Resource Locator request to the mapped application program component.
12. The system as set forth in claim 9 wherein the mapping is performed by one or more associated servlet filters.