Copyright

Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and Addison-Wesley was aware of a trademark claim, the designations have been printed with initial capital letters or in all capitals.

The authors and publisher have taken care in the preparation of this book, but make no expressed or implied warranty of any kind and assume no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages in connection with or arising out of the use of the information or programs contained herein.

The publisher offers discounts on this book when ordered in quantity for bulk purchases and special sales. For more information, please contact:

         U.S.  Corporate  and  Government  Sales
         (800)  382-3419
         [e-mail]

For sales ouside of the U.S., please contact:

         International  Sales
         (317)  581-3793
         [e-mail]

Visit Addison-Wesley on the Web: www.awprofessional.com

Library of Congress Cataloging-in-Publication Data

Enterprise  Java  security  :  building  secure  J2EE  applications  /  Marco  Pistoia  .  .  .  [et  al.].
             p.  cm.
         Includes  bibliographical  references  and  index.
         ISBN  0-321-11889-8  (pbk  ;  alk  paper)
         1.  Java  (Computer  program  language)  2.  Computer  security.  I.  Pistoia,  Marco.
     QA76.73.J3E58  2004
     005.8 ”dc22
                                                                                                                                         2003063781

Copyright 2004 by Pearson Education, Inc.

All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or by any means, electronic, mechanical, photocopying, recording, or otherwise , without the prior consent of the publisher. Printed in the United States of America. Published simultaneously in Canada.

For information on obtaining permission for use of material from this work, please submit a written request to:

         Pearson  Education,  Inc.
         Rights  and  Contracts  Department
         75  Arlington  Street,  Suite  300
         Boston,  MA  02116
         Fax:  (617)  848-7047

Text printed on recycled paper

1 2 3 4 5 6 7 8 9 10 ”CRS ”0807060504

First printing, February 2004

Dedication

To my wife, Paolina, for giving me the strength and courage to be the man God wants me to be.

” Marco

In loving memory of my father, who continues to inspire my quest for knowledge. To my wife, Sowmya, for her understanding and support to pursue my dreams. To my daughter , Divya, for giving me a new perspective on life. To my mother and my family, for making me who I am.

” Nataraj

To Karen, Sam, and Max, for the love, support, and joy they bring to my life. To my mother, who taught me, "Life is short. Eat dessert first." To my father, who is always there when I need him. To my brother, who taught me how to count.

” Larry

To my wife, Paula, and my daughter, Sarah. Thanks for keeping my life in check and reminding me that there is life beyond "geekdom." You both are the joys of my life.

” Anthony