security constraint bug?

[Brandon Goodin]

I have the following security constraint specified in my web.xml:

 

<security-constraint>

    <web-resource-collection>

        <web-resource-name>Customer Area</web-resource-name>

        <url-pattern>/customer/*</url-pattern>

    </web-resource-collection>

    <auth-constraint>

        <role-name>customer</role-name>

    </auth-constraint>

</security-constraint>

 

When I go to the following url it gets blocked.

 

http://phase.zapto.org:8282/customer.do

 

I'm assuming this is a bug. Is it not?

 

I'm using Tomcat 5.0.18

 

Brandon Goodin