On Tue, 25 Feb 2003, Raible, Matt wrote:

> Date: Tue, 25 Feb 2003 13:59:20 -0700
> From: "Raible, Matt" <[EMAIL PROTECTED]>
> Reply-To: Tomcat Users List <[EMAIL PROTECTED]>
> To: 'Tomcat Users List' <[EMAIL PROTECTED]>
> Subject: RE: Authentication and Roles - case sensitivity
>
>
>
> > Tomcat is case sensitive everywhere except where the servlet
> > spec says it
> > is explicitly not case sensitive (such as request.getHeader()).  That
> > includes things like matching role names.
>
> So you're saying that matching role names is NOT case sensitive.

No, I'm saying that it *is* case sensitive -- the only places Tomcat is
not case sensitive is where this is *explicitly* documented.

  I'm
> guessing this from my own experience on 4.1.18.  However, since
> request.isUserInRole() IS case sensitive, how can I do matching in a NON
> case sensitive way.  Too bad there isn't a request.isUserInRoleIgnoreCase()
> ;-)

Sounds like a chance to create your very own custom patches to Tomcat ...
but I'd strongly recommend that you either make your app use the roles
that are defined by your Realm implementation "as is", or go change
your Realm to return the role names in the case expected by your app.

>
> Thanks for any tips.
>
> Matt
>

Craig

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to