Did you get to the root cause?  I am having exactly the same problem.
Thanks,

On Mar 21, 9:17 am, Don Schwarz <[email protected]> wrote:
> Can you reply privately with your app id?
>
>
>
>
>
>
>
> On Sat, Mar 19, 2011 at 1:23 PM, Rob <[email protected]> wrote:
> > Hi folks,
>
> > I'm sure this is just me being foolish, but I have the following in my
> > web.xml:
>
> >        <security-constraint>
> >        <web-resource-collection>
> >          <url-pattern>/comment/*</url-pattern>
> >          <url-pattern>/entry/*</url-pattern>
> >          <url-pattern>/series/*</url-pattern>
> >          <url-pattern>/upload/*</url-pattern>
> >        </web-resource-collection>
> >        <auth-constraint>
> >            <role-name>admin</role-name>
> >        </auth-constraint>
> >        </security-constraint>
>
> > However, even with this in place, I can still hit urls like these
> > without logging in:
>
> >http://xxx.appspot.com/entry/edit/2001
> >http://xxx/appspot.com/series/edit/42
>
> > What am I missing?
>
> > Thanks in advance,
>
> >  ~rob
>
> > --
> > You received this message because you are subscribed to the Google Groups
> > "Google App Engine for Java" group.
> > To post to this group, send email to
> > [email protected].
> > To unsubscribe from this group, send email to
> > [email protected].
> > For more options, visit this group at
> >http://groups.google.com/group/google-appengine-java?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine for Java" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.

Reply via email to