If you take a look at the security.xml you will see some examples of how to 
require different roles for different URL patterns.  

http://fisheye4.cenqua.com/browse/appfuse/trunk/web/common/src/main/webapp/WEB-INF/security.xml?r=3044

There are two ways to accomplish your goal.  First you could exclude the 
"/common/**" URI pattern from all filtering (see the "filterChainProxy" bean 
definition).  Or you could allow the "ROLE_ANONYMOUS" access to the "/common/*" 
URI pattern (see the "filterInvocationInterceptor" bean definition).  

If you go for the second option you may want to allow "ROLE_ADMIN" and 
"ROLE_USER" as well.  Otherwise only users who are not logged in could access 
pages matching that pattern.

Hope that helps, 
Nathan




----- "MHL" <[EMAIL PROTECTED]> wrote:
> Hi all
> 
> I am very new to Appfuse or Spring framework.  I read some of the
> documents
> and followed the tutorials whole day today and I like it alot. it
> saves us a
> lots of time to integrate multiple projects.  
> 
> I have a question, and I can't find an answer so far. My question is
> how can
> I configure Appfuse so I can have some pages that everyone can access
> to
> them without loging in?
> 
> For instance,  everyone can view the pages inside of
> http://localhost:8080/common without logging in.
> 
> As I am very new to this Framework, if you can give me some code
> snippets
> that would be great.
> 
> 
> thanks,
> 
> B
> 
> -- 
> View this message in context:
> http://www.nabble.com/viewing-some-web-pages-in-a-specific-path-without-go-through-login-tp15251354s2369p15251354.html
> Sent from the AppFuse - User mailing list archive at Nabble.com.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to