Re: [Acegisecurity-developer] Just starting

2005-03-25 Thread Ben Alex
Greg Akins wrote:
Thanks for responding.
I was missing some "parts" of the config files.. I got
everything cleared up so my web application starts
(Yay!!).
Now, the problem is.. I get a infinite redirect on web
application.
I'd image I screwed something up in the Controller
setup (I'm not familiar with Spring MVC and am trying
to incorporate this in a Struts app) and that is
causing my problem. 
 


Sounds like your login URL is being protected by 
FilterSecurityInterceptor, which throws an 
AccessDeniedException/AuthenticationException and the wrapping 
SecurityEnforcementFilter re-directs you once more to the login URL. Try 
checking the debug-level log. Also check your login page URL is set to 
ROLE_ANONYMOUS (if using anonymous authentication) or it is excluded 
from the Ant/regular expression paths defined against 
FilterSecurityInterceptor.

Ben

---
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer


Re: [Acegisecurity-developer] AuthorizeTag.java

2005-03-25 Thread Ben Alex
Shishir K. Singh wrote:
Could there be instances where currentUser.getAuthorities() returns
null. 
If so, Arrays.asList(currentUser.getAuthorities()); will throw an
exception. 

 

Most people use DaoAuthenticationProvider, and the corresponding 
UserDetails interface mandates getAuthorities() as non-null. However, 
Authentication.getAuthorities() is theoretically allowed return null 
under its interface contract, so we should handle this possibility.

If you or Francois wish to check the taglibs for incorrect usage and 
send any patches, I'll be pleased to apply them.

Ben
---
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
___
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer