Authentication of AJAX requests from Portlet

Hi,

We are developing a number of Portlets and are planning to make heavy use
of AJAX to prevent page loads. We are authenticating to the Jahia server
using LDAP, and we want to use the userid to track who has created/updated
records in our application database. We are also mapping LDAP groups to
Roles (defined in web.xml) and want to programmatically decide what
functionality is available based on the role.

In a simple test application we can retrieve the userid using
PortletRequest.getRemoteUser() in Portlet code, but it is not available
from HttpServletRequest.getRemoteUser() for AJAX requests to servlets in
our Portlet WebApp. We have the same problem with roles - they are
available in the Portlet, but not in Servlets (or JSPs rendered from
Servlets called via an AJAX request).

Is there any way that we can authenticate our AJAX calls so that they have
the same user and roles as Portlet requests?

Thanks,
Andrew May
IT - Sr. Developer
Abercrombie & Fitch

_______________________________________________
dev_list mailing list
[email protected]
http://lists.jahia.org/cgi-bin/mailman/listinfo/dev_list