is it possible to tell a portal page that it can only be viewed in ssl (i.e.
https) mode via a security constraint?
e.g.
<security-constraint>
<policy-permission>
<role-name>Admin</role-name>
<action-name>view</action-name>
</policy-permission>
</security-constraint>
would force the user to log in and only a member of the group Admin can view
the page. this works for me.
what i would need now ist something that forces the user/browser to use a https
connection, but without forcing a login:
<security-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
and this should be valid for a portal page
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4065780#4065780
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4065780
_______________________________________________
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user
