burtonator <[EMAIL PROTECTED]> wrote:
> Neeme Praks wrote:
> > 
> > I would propose to change the markup to something like
> > <security>
> >   <allow>
> >         <role>administrators</role>
> >         <user>neeme</user>
> >   </allow>
> >   <deny>
> >         <group>HRM</group>
> >   </deny>
> > </security>

What is the <group> in the above example?  Wouldn't we just define roles and
users in the deny portion also.  I'm +1 for this, but don't have the xml
knowledge/time to implement right now.  So the above example would be:

<security>
  <allow> 
     <role>admin</role>
     <user>hdumpty</user>
  </allow>
  <deny>
     <role>user</role>
  </deny>
</security>

And the default for not defining an <allow> or <deny> section would be to
allow or deny everyone?

jb 


Jeff Brekke
mailto:[EMAIL PROTECTED]
http://sites.netscape.net/ekkerbj


____________________________________________________________________
Get your own FREE, personal Netscape WebMail account today at 
http://webmail.netscape.com.


--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Archives and Other:  <http://java.apache.org/main/mail.html>
Problems?:           [EMAIL PROTECTED]

Reply via email to