[appfuse-user] security concern

Thu, 03 Jul 2008 23:21:37 -0700 

Hi All,

            I am facing a security problem

I am accessing my application through url say
.http:localhost:8080/userdata/1/xyz

I have specified 

 

<bean id="channelProcessingFilter"
class="org.acegisecurity.securechannel.ChannelProcessingFilter">

        <property name="channelDecisionManager"
ref="channelDecisionManager"/>

        <property name="filterInvocationDefinitionSource">

            <value>

                PATTERN_TYPE_APACHE_ANT

                /admin/**=REQUIRES_SECURE_CHANNEL

                /login*=REQUIRES_SECURE_CHANNEL

                /j_security_check*=REQUIRES_SECURE_CHANNEL

                /userdata=REQUIRES_SECURE_CHANNEL

 

 

<bean id="filterInvocationInterceptor"
class="org.acegisecurity.intercept.web.FilterSecurityInterceptor">

        <property name="authenticationManager" ref="authenticationManager"/>

        <property name="accessDecisionManager" ref="accessDecisionManager"/>

        <property name="objectDefinitionSource">

            <value>

                PATTERN_TYPE_APACHE_ANT

                /admin/*=ROLE_ADMIN

                /userdata *=ROLE_ADMIN

 

In security.xml                

 

But now if I copy this same url to some other browser then ideally it should
take me to login screen but it is not happening it takes me to the same
screen

 

Please help.

 

Thanx n Regards

Anshu

Reply via email to