Hi all
I defined a securtiy constraint in the web.xml file that looks like that
<security-constraint>
<web-resource-collection>
<url-pattern>/timesheet/controllers/timesheets/*</url-pattern>
<url-pattern>/Timesheets/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>employee</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
also I am using the "other" security Realm
with the files
"users.properties" that looks like the following
employee=employee
project manager=project manager
operation manager=operation manager
resource manager=resource manager
manager=manager
and "roles.properties" that looks like the following
employee=employee
project manager=project manager
operation manager=operation manager
resource manager=resource manager
manager=manager
so from my little knowledge the user employee has password employee and the
role employee and /Timesheets/* pattern requires role employee
my welcome index file redirects to /Timesheets/Timesheets.do
when I open the timesheet application the index file redirects to
Timesheets/Timesheets.do so he asks for login and preview to me the
login-form.jsp I enter usernae: employee and password: employee
and here is the problem I excpected to log me in to the timesheets page but
instead I have this error page
HTTP Status 403 - User is not authorized to access action /Timesheets/Timesheets
type Status report
message User is not authorized to access action /Timesheets/Timesheets
description Access to the specified resource (User is not authorized to access
action /Timesheets/Timesheets) has been forbidden.
Apache Tomcat/5.0.28
can any one tell me what is the problem
Sorry for the long Post
yours,
Mohamed Fthay
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3890038#3890038
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3890038
-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
JBoss-user mailing list
JBoss-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jboss-user
