Hello Jonathan, Here's the web.xml (there are some stuff for DWR too): ######################### WEB.XML ######################### <?xml version="1.0" encoding="UTF-8"?> <web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"> <display-name>geoplanning Tapestry 5 Application</display-name> <context-param> <param-name>contextConfigLocation</param-name> <param-value>classpath:applicationContext.xml</param-value> </context-param> <context-param> <!-- The only significant configuration for Tapestry 5, this informs Tapestry of where to look for pages, components and mixins. --> <param-name>tapestry.app-package</param-name> <param-value>com.marketip.geoplanning.web</param-value> </context-param> <filter> <filter-name>JpaFilter</filter-name> <filter-class>org.springframework.orm.jpa.support.OpenEntityManagerInViewFil ter</filter-class> </filter> <filter-mapping> <filter-name>JpaFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>app</filter-name> <filter-class>org.apache.tapestry5.spring.TapestrySpringFilter</filter-class > </filter> <filter-mapping> <filter-name>app</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>DwrSecurityFilter</filter-name> <filter-class>org.springframework.security.util.FilterToBeanProxy</filter-cl ass> <init-param> <param-name>targetClass</param-name> <param-value>org.springframework.security.util.FilterChainProxy</param-value > </init-param> </filter> <filter-mapping> <filter-name>DwrSecurityFilter</filter-name> <url-pattern>/dwr/*</url-pattern> </filter-mapping> <servlet> <servlet-name>dwr-invoker</servlet-name> <servlet-class>org.directwebremoting.spring.DwrSpringServlet</servlet-class> <init-param> <param-name>debug</param-name> <param-value>true</param-value> </init-param> </servlet> <servlet-mapping> <servlet-name>dwr-invoker</servlet-name> <url-pattern>/dwr/*</url-pattern> </servlet-mapping> <mime-mapping> <extension>ico</extension> <mime-type>image/x-icon</mime-type> </mime-mapping> </web-app> ######################### /WEB.WML #########################
And the applicationContex.xml : (There is a lot of non-relevant stuff I think, but just in case, I paste the whole file) I think only the part between <!--Security --> and <!-- Tapestry --> is relevant. ######################### APPLICATIONCONTEXT.XML ######################### <?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:context="http://www.springframework.org/schema/context" xmlns:tx="http://www.springframework.org/schema/tx" xmlns:dwr="http://www.directwebremoting.org/schema/spring-dwr" xmlns:security="http://www.springframework.org/schema/security" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.5.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-2.5.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-2.5.xsd http://www.directwebremoting.org/schema/spring-dwr http://www.directwebremoting.org/schema/spring-dwr-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd"> <!-- ===================== Security ===================== --> <security:authentication-manager alias="providerManager" /> <security:authentication-provider user-service-ref="userDao" /> <security:global-method-security secured-annotations="enabled" /> <bean id="dwrFilterChainProxy" class="org.springframework.security.util.FilterChainProxy"> <property name="filterInvocationDefinitionSource"> <value> CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON PATTERN_TYPE_APACHE_ANT /**=httpSessionContextIntegrationFilter </value> </property> </bean> <bean id="httpSessionContextIntegrationFilter" class="org.springframework.security.context.HttpSessionContextIntegrationFil ter" /> <!-- ==================== Tapestry ==================== --> <context:annotation-config /> <context:component-scan base-package="com.marketip.geoplanning.domain.dao.jpa" /> <context:component-scan base-package="com.marketip.geoplanning.services" /> <context:component-scan base-package="com.marketip.geoplanning.services.impl" /> <context:component-scan base-package="com.marketip.geoplanning.services.dwr" /> <context:component-scan base-package="com.marketip.geoplanning.report" /> <!-- Placholders to import inherited variables --> <bean id="project-properties" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigure r"> <property name="ignoreUnresolvablePlaceholders"> <value>true</value> </property> <property name="locations"> <list> <value>classpath*:geoplanning.properties</value> </list> </property> </bean> <!-- post-processors for all standard config annotations --> <context:annotation-config /> <context:component-scan base-package="com.marketip.geoplanning" /> <!-- Exception translation bean post processor --> <bean class="org.springframework.dao.annotation.PersistenceExceptionTranslationPos tProcessor" /> <bean name="sharedDataSource" class="org.apache.commons.dbcp.datasources.SharedPoolDataSource" destroy-method="close"> <property name="connectionPoolDataSource"> <bean class="org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS"> <property name="driver" value="${hibernate.connection.driver_class}" /> <property name="url" value="${hibernate.connection.url}" /> <property name="user" value="${hibernate.connection.username}" /> <property name="password" value="${hibernate.connection.password}" /> <property name="poolPreparedStatements" value="true" /> </bean> </property> <property name="defaultTransactionIsolation" value="1" /> <property name="defaultReadOnly" value="false" /> <property name="maxActive" value="10" /> <property name="maxIdle" value="10" /> <property name="maxWait" value="10000" /> <property name="validationQuery" value="select 1"></property> </bean> <bean id="entityManagerFactory" class="org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean"> <property name="dataSource" ref="sharedDataSource" /> <property name="jpaDialect"> <bean class="${jpa.dialect}" /> </property> <property name="jpaVendorAdapter"> <bean class="org.springframework.orm.jpa.vendor.${jpa.vendor.adapter}"> <property name="showSql" value="${hibernate.show_sql}" /> <property name="databasePlatform" value="${hibernate.dialect}" /> <!-- On ne genere pas la BDD au demarrage --> <property name="generateDdl" value="false" /> </bean> </property> </bean> <bean id="txManager" class="org.springframework.orm.jpa.JpaTransactionManager"> <property name="entityManagerFactory" ref="entityManagerFactory" /> </bean> <bean id="routingService" class="com.marketip.geoplanning.services.impl.RoutingService" scope="singleton"> <constructor-arg value="${routing.path}" /> </bean> <bean id="geoService" class="com.marketip.geoplanning.services.impl.GeoService"> <constructor-arg value="${geoservices.url}" /> <constructor-arg value="${geoservices.mid}"/> </bean> <bean id="dwrGeoService" class="com.marketip.geoplanning.services.dwr.GeoService"> <dwr:remote javascript="RemoteGeoService" /> </bean> <bean id="dwrTaskService" class="com.marketip.geoplanning.services.dwr.RemoteTaskService"> <dwr:remote javascript="RemoteTaskService" /> </bean> <bean id="dwrCustomerService" class="com.marketip.geoplanning.services.dwr.RemoteCustomerService"> <dwr:remote javascript="RemoteCustomerService" /> </bean> <bean id="dwrTechnicianService" class="com.marketip.geoplanning.services.dwr.RemoteTechnicianService"> <dwr:remote javascript="RemoteTechnicianService" /> </bean> <bean id="dwrUserService" class="com.marketip.geoplanning.services.dwr.RemoteUserService"> <dwr:remote javascript="RemoteUserService" /> </bean> <!-- enable the configuration of transactional behavior based on annotations --> <tx:annotation-driven transaction-manager="txManager" /> <dwr:configuration> <dwr:init> <dwr:converter class="com.marketip.geoplanning.services.dwr.GeometryConverter" id="geometryConverter" /> </dwr:init> <dwr:convert type="bean" class="com.marketip.geoplanning.domain.dto.dwr.RemoteAssignment" /> <dwr:convert type="bean" class="com.marketip.geoplanning.services.dwr.Address" /> <dwr:convert type="bean" class="com.marketip.geoplanning.services.dwr.Customer"/> <dwr:convert type="geometryConverter" class="com.vividsolutions.jts.geom.Geometry" /> </dwr:configuration> </beans> ######################### /APPLICATIONCONTEXT.XML ######################### Thank you for taking time to help me. Nicolas -----Message d'origine----- From : Jonathan Barker To : Tapestry users Object : Re: TSS add custom voter & securing non-tapestry methods It's really strange that you are seeing the "default" access manager, as well as one you are trying to define. Could you post your web.xml and application.xml files? Jonathan Barker ITStrategic --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org For additional commands, e-mail: users-h...@tapestry.apache.org