CODE:

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-comfficeffice" />
public class SecurityCheckFunctionality implements GISFunctionality {
private AGSMapResource resource;
  public void initFunctionality(GISResource resource) { //empty }
public void destroyFunctionality() { //empty  }
  public GISResource getResource() { //empty  }
}

CODE:

public void initFunctionality(GISResource resource) {
this.resource = (AGSMapResource)resource; //得到资源
    //查看用户是否属于"petroEmployee" 角色
   if(!WebUtil.getExternalContext().isUserInRole("pretroEmployee")){
   //从Resource中得到MapFunctionality
  AGSMapFunctionality mapFunc = (AGSMapFunctionality)resource.getFunctionality("map");

   //得到对 MapServerInfo的引用
   MapServerInfo serverInfo = mapFunc.getMapServerInfo();
   //得到 "Pipeline_Network" 层
MapLayerInfo pipelineLayerInfo = AGSUtil.getLayerInfo("PipeLine_Network",layerInfos);
     if(pipelineLayerInfo==null)
      return; //层不存在，return.
      //从TOC中移除
      MapLayerInfo[] newLayerInfos =  removeLayer(pipelineLayerInfo,layerInfos);
      serverInfo.setMapLayerInfos(newLayerInfos);
      //从MAP中移除
      LayerDescription[] layerDescriptions =serverInfo.getDefaultMapDescription().getLayerDescriptions();
     //新建一个层描述，替换原来的层描述
      LayerDescription[] newLayerDescriptions = new LayerDescription[newLayerInfos.length];

      for(int i=0;i<newLayerInfos.length;i++){
    newLayerDescriptions=AGSUtil.getLayerDescription(newLayerInfos.getLayerID(),layerDescriptions);
5                                                                                    serverInfo.getDefaultMapDescription().setLayerDescriptions(newLayerDescriptions);
    }
  }

CODE:

  //Logic to remove a layer and all its descendants
  private MapLayerInfo[] removeLayer(MapLayerInfo unwantedLayerInfo, MapLayerInfo[] oldLayerInfos) {
        //新建一个MapLayerInfo
    MapLayerInfo[] newLayerInfos = new MapLayerInfo[oldLayerInfos.length-1];
    ArrayList descendantLayers = new ArrayList();
    for(int i=0,j=0;i<oldLayerInfos.length;i++){
      if(oldLayerInfos.getLayerID()!=unwantedLayerInfo.getLayerID())
        newLayerInfos[j++] = oldLayerInfos;
      if(oldLayerInfos.getParentLayerID()==unwantedLayerInfo.getLayerID())
        descendantLayers.add(oldLayerInfos);
  }
    for(int i=0;i<descendantLayers.size();i++){
newLayerInfos = removeLayer((MapLayerInfo)descendantLayers.get(i),newLayerInfos);
    }
    return newLayerInfos;
  }

CODE:

<managed-bean>
    <managed-bean-name>securitycheck</managed-bean-name>
     <managed-bean-class>com.mypackage.SecurityCheckFunctionality</managed-bean-class>
    <managed-bean-scope>none</managed-bean-scope>
</managed-bean>

CODE:

  
<managed-bean>
    <managed-bean-name>ags1</managed-bean-name>
    <managed-bean-class>
    com.esri.adf.web.ags.data.AGSLocalMapResource
  </managed-bean-class>
   <managed-bean-scope>none</managed-bean-scope>
  ...
  <managed-property>
    <property-name>functionalities</property-name>
    <map-entries>
      <map-entry>
<key>map</key>
<value>#{agsMap}</value>
      </map-entry>
      <map-entry>
<key>query</key>
<value>#{agsQuery}</value>
      </map-entry>
      <map-entry>
<key>tile</key>
<value>#{agsTile}</value>
      </map-entry>
      <map-entry>
<key>overview</key>
<value>#{agsOverview}</value>
      </map-entry>
      <map-entry>
<key>pipeline_security_check</key>
<value>#{securitycheck}</value>
      </map-entry>
      <map-entry>
<key>toc</key>
<value>#{agsToc}</value>
      </map-entry>
    </map-entries>
  </managed-property>
</managed-bean>

CODE:

<login-config>
<auth-method>DIGEST</auth-method>
  <realm-name>My_WebApplication</realm-name>
</login-config>
//声明两个组用户
<security-role>
  <role-name>petroEmployee</role-name>
</security-role>

<security-role>
  <role-name>stateEmployee</role-name>
</security-role>

//声明什么资源将收到安全控制，这里我们把整个目录都控制，当然你也可以控制胆敢目录
<security-constraint>
  <web-resource-collection>
<url-pattern>*<url-pattern>
  </web-resource-collection>
  <auth-constraint>
<role-name>petroEmployee</role-name>
<role-name>stateEmployee<role-name>
</auth-constraint>
</security-constraint>