Hi Robert, I think the problem was the cache and my understanding of how browser 'stealth' modes work. I thought if I open up a fresh 'stealth' mode window in a browser such as Chrome, it would not read anything from the cache. But apparently, it doesn't work that way. It still reads the file from the cache. However, it doesn't get the login information from the cookie. So, while I'm not logged, I could still see the file. It works fine. When I said I used it on different browsers and different machines, I was using the same mechanism (stealth mode) in Chrome and Firefox on different machines and the file must have been cached in all cases.
Thanks for your help. On May 3, 11:09 pm, Robert Kluin <robert.kl...@gmail.com> wrote: > Hi, > Maybe you've already logged in before. Have you tried clearing your > cookies or using a different browser? > > Robert > > > > > > > > On Tue, May 3, 2011 at 01:21, DFB <harwinder.bha...@gmail.com> wrote: > > My GWT application is using Google Accounts authentication. I've added > > this simplesecurityconstraintto my web.xml file: > > > <security-constraint> > > <web-resource-collection> > > <url-pattern>ds/*</url-pattern> > > </web-resource-collection> > > <auth-constraint> > > <role-name>*</role-name> > > </auth-constraint> > > </security-constraint> > > > In the hosted mode, if I type the full path to a file inside the 'ds' > > folder (example http://<>/ds/abc.xml), it redirects me to the login > > page. After login, I can access the file. However, it doesn't work > > when the app is deployed to GAE. Any user can access the file from the > > URLhttp://myappid.appspot.com/ds/abc.xmlwithout logging in. I was > > expecting the app to redirect me to the Google accounts login page > > when I tried to access the file. > > > Am I missing something? > > > Thanks in advance. > > > -- > > You received this message because you are subscribed to the Google Groups > > "Google App Engine" group. > > To post to this group, send email to google-appengine@googlegroups.com. > > To unsubscribe from this group, send email to > > google-appengine+unsubscr...@googlegroups.com. > > For more options, visit this group > > athttp://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
