Hi,

We have some jaggery APIs protected with basic auth as follows [3]. But
when tenant users try to access these APIs it gives following error [1] to
client and warn [2] in backend. In normal web apps, we could enable saas
mode using web.xml. Do we have to do something similar here ?

[1] You do not have permission to login to this application.Please contact
your administrator and request permission.

[2] WARN - CarbonTomcatRealm Illegal access attempt by dinu...@t2.com to
secured resource hosted by tenant carbon.super

[3] jaggery.conf
-----------------

"loginConfig": {
        *"authMethod": "BASIC"*
    },
    "securityConstraints": [
        {
            "securityConstraint": {
                "webResourceCollection": {
                    "name": "store",
                    "urlPatterns": [
                        *"/apis/v1/assets/*"],*
                    "methods": [
                        "GET",
                        "POST",
                        "PUT",
                        "DELETE",
                        "HEAD",
                        "OPTIONS",
                        "TRACE",
                        "CONNECT",
                        "PATCH"
                    ]
                },
                "authRoles": [
                    "store",
                    "admin"
                ]
            }
        }
    ]


Regards,
Dinusha.


-- 
Dinusha Dilrukshi
Associate Technical Lead
WSO2 Inc.: http://wso2.com/
Mobile: +94725255071
Blog: http://dinushasblog.blogspot.com/
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to