Thanks Ben. It works like a charm.
And I can also have my own AuthenticationTrustResolver
Implementation to send 403 response
to anonymous user who doesn't have PRIVATE_ANONYMOUS
role.
Hongbo
--- Ben Alex <[EMAIL PROTECTED]> wrote:
> Hongbo HE wrote:
> > My config is like following:
> >
> >
> The configuration is incorrect. In your case you
> will require not one
> but two AnonymousProcessingFilters. The first will
> be the standard
> AnonymousProcessingFilter which will always setup
> the
> SecurityContextHolder with ROLE_ANONYMOUS. The
> second will be your
> subclasses AnonymousProcessingFilter which applies
> IP-specific anonymous
> authentication and has its UserAttribute property
> set to contain a
> different GrantedAuthority (such as
> ROLE_PRIVATE_SUBNET_ANONYMOUS as
> well as ROLE_ANONYMOUS). You must ensure the
> subclassed
> AnonymousProcessingFilter appears before the
> fallback
> AnonymousProcessingFilter in your FilterChainProxy.
> You can then use
> ROLE_ANONYMOUS for the login page, and
> ROLE_PRIVATE_SUBNET_ANONYMOUS
> when only an anonymous user from your restricted
> subnet is allowed.
>
> Cheers
> Ben
>
>
>
-------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do
> you grep through log files
> for problems? Stop! Download the new AJAX search
> engine that makes
> searching your log files as easy as surfing the
> web. DOWNLOAD SPLUNK!
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
> _______________________________________________
> Home: http://acegisecurity.org
> Acegisecurity-developer mailing list
> Acegisecurity-developer@lists.sourceforge.net
>
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
