title: How do I prevent direct access of a jsp through a url?
body: <p>I am working on a web application in java. To prevent direct access of a url, I have used the code that checks for session validation. Its a customer-employee app. </p>
  
  <p>In every page except the login page, I have the same header where the menu items are generated dynamically using session, depending on the role. However, when the employee accesses the url directly, it should be only accessible by a customer, the url is still accessible. It should not be like this. </p>
  
  <p>How can I prevent an employee from direct access to a jsp using the url which is only valid for customer ?</p>