14.5. Servlet Authentication

You can configure a repository to this provider, and then have your applications create a org.modeshape.jcr.api.ServletCredentials instance with the servlet's HttpServletRequest . The hierarchical database will then delegate all authentication and role-based authorization to the servlet container. Again, the roles are expected to be readonly, readwrite and admin.