*Without* transport-guarantee element, constraints are NOT enforced..
Saludos ,
Ignacio J. Ortega
> -----Mensaje original-----
> De: Mike Slinn [mailto:[EMAIL PROTECTED]]
> Enviado el: martes 6 de marzo de 2001 10:29
> Para: [EMAIL PROTECTED]
> Asunto: RE: JDBC Realm not triggering
>
>
> Ignacio:
>
> I just read your earlier replies, must have missed them
> earlier. Do you now
> mean that the following will not work because the transport-guarantee
> element is set to NONE:
>
> <security-constraint>
> <web-resource-collection>
> <web-resource-name>developer</web-resource-name>
> <description>Developers have access to everything</description>
> <url-pattern>/pwAdmin/*</url-pattern>
> <url-pattern>/pwModerator/*</url-pattern>
> <url-pattern>/pwNormal/*</url-pattern>
> <url-pattern>/pwPortal/*</url-pattern>
> <url-pattern>/pwTest/*</url-pattern>
> <http-method>get</http-method>
> <http-method>post</http-method>
> </web-resource-collection>
>
> <auth-constraint>
> <role-name>developer</role-name>
> </auth-constraint>
>
> <user-data-constraint>
> <transport-guarantee>NONE</transport-guarantee>
> </user-data-constraint>
> </security-constraint>
>
> or do you mean that the following will not work because the
> transport-guarantee element is missing?
>
> <security-constraint>
> <web-resource-collection>
> <web-resource-name>developer</web-resource-name>
> <description>Developers have access to everything</description>
> <url-pattern>/pwAdmin/*</url-pattern>
> <url-pattern>/pwModerator/*</url-pattern>
> <url-pattern>/pwNormal/*</url-pattern>
> <url-pattern>/pwPortal/*</url-pattern>
> <url-pattern>/pwTest/*</url-pattern>
> <http-method>get</http-method>
> <http-method>post</http-method>
> </web-resource-collection>
>
> <auth-constraint>
> <role-name>developer</role-name>
> </auth-constraint>
> </security-constraint>
>
> Message-ID: <80F5674514B4D311BAFC0040F6A45EEE0EC124@ntserver>
>
> Sorry a mistake, without transport guarantee, container
> managed security
> will not work at all.. constraints need to have transport to
> be added to
> context.
>
> Saludos ,
> Ignacio J. Ortega
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, email: [EMAIL PROTECTED]
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]
