String extUserLogin = null;
User user = null;
ServletContext application = request.getSession().getServletContext();
//try to get ext user from session
IUser extUser = (IUser) request.getSession().getAttribute(
IConst.SESSION.EXT_USER_KEY);
if (extUser != null) {
extUserLogin = extUser.getName();
} else {
// try to get user login from JAAS
if ((request.getUserPrincipal() != null)
&& ((_userRole == null) || request.isUserInRole(_userRole))) {
extUserLogin = request.getUserPrincipal().getName();