> Markdown version of [Plain Servlet Applications](https://vaadin.com/docs/next/flow/security/plain-servlet). Section index: [llms.txt](https://vaadin.com/docs/next/flow/llms.txt)

# Plain Servlet Applications

Vaadin’s view access control works in plain servlet applications. It relies on the user principal and the roles of the servlet request, so it works with any authentication mechanism that sets them, such as the application’s own user store or servlet container authentication.

## <a id="topics"></a>Topics

- [Setting Up Security](https://vaadin.com/docs/next/flow/security/plain-servlet/setup.md): Enabling view access control in a Vaadin application that doesn't use Spring.
- [Container-Managed Authentication](https://vaadin.com/docs/next/flow/security/plain-servlet/container-authentication.md): Letting the servlet container authenticate the users of a plain servlet Vaadin application.