Well, after much pounding of my head during the last few days, I actually found
a solution.
As it turns out, I needed to remove the security role tag from the web.xml file
and place an '*' into the role-name tag.
It's currently my assumption, that once the user is authenticated, the code
would check the user's roles to make sure they could have access to the
application.
|
|
| <?xml version="1.0" encoding="UTF-8"?>
| <web-app version="2.4"
| xmlns="http://java.sun.com/xml/ns/j2ee"
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
| xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
| http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
|
| <resource-ref>
| <description>MyApp Datasource</description>
| <res-ref-name>jdbc/DefaultDS</res-ref-name>
| <res-type>javax.sql.DataSource</res-type>
| <res-auth>Container</res-auth>
| <res-sharing-scope>Shareable</res-sharing-scope>
| </resource-ref>
| <security-constraint>
| <web-resource-collection>
| <web-resource-name>MyApplication</web-resource-name>
| <url-pattern>/greeting.jsp</url-pattern>
| <http-method>HEAD</http-method>
| <http-method>GET</http-method>
| <http-method>POST</http-method>
| <http-method>PUT</http-method>
| <http-method>DELETE</http-method>
| </web-resource-collection>
| <auth-constraint>
| <role-name>*</role-name>
| </auth-constraint>
| <user-data-constraint>
| <transport-guarantee>NONE</transport-guarantee>
| </user-data-constraint>
| </security-constraint>
|
| <login-config>
| <auth-method>FORM</auth-method>
| <realm-name>MyRealm</realm-name>
| <form-login-config>
| <form-login-page>/login.jsp</form-login-page>
| <form-error-page>/loginerror.jsp</form-error-page>
| </form-login-config>
| </login-config>
| </web-app>
|
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3884512#3884512
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3884512
-------------------------------------------------------
This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening
July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual
core and dual graphics technology at this free one hour event hosted by HP,
AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user