Ignacio:
I just read your earlier replies, must have missed them earlier. Do you now
mean that the following will not work because the transport-guarantee
element is set to NONE:
<security-constraint>
<web-resource-collection>
<web-resource-name>developer</web-resource-name>
<description>Developers have access to everything</description>
<url-pattern>/pwAdmin/*</url-pattern>
<url-pattern>/pwModerator/*</url-pattern>
<url-pattern>/pwNormal/*</url-pattern>
<url-pattern>/pwPortal/*</url-pattern>
<url-pattern>/pwTest/*</url-pattern>
<http-method>get</http-method>
<http-method>post</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>developer</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
or do you mean that the following will not work because the
transport-guarantee element is missing?
<security-constraint>
<web-resource-collection>
<web-resource-name>developer</web-resource-name>
<description>Developers have access to everything</description>
<url-pattern>/pwAdmin/*</url-pattern>
<url-pattern>/pwModerator/*</url-pattern>
<url-pattern>/pwNormal/*</url-pattern>
<url-pattern>/pwPortal/*</url-pattern>
<url-pattern>/pwTest/*</url-pattern>
<http-method>get</http-method>
<http-method>post</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>developer</role-name>
</auth-constraint>
</security-constraint>
Message-ID: <80F5674514B4D311BAFC0040F6A45EEE0EC124@ntserver>
Sorry a mistake, without transport guarantee, container managed security
will not work at all.. constraints need to have transport to be added to
context.
Saludos ,
Ignacio J. Ortega
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]
