Hi

I'm trying to secure the admin pages of my applications.
The problem is that I do not get promted for login/password when using this 
<url-pattern>/ppwebshop/admin/*</url-pattern>
I do get get promted for login/password when using <url-pattern>/*</url-pattern> 
though.

Any ideas?

An url to secure:
http://127.0.0.1:8080/ppwebshop/admin/categoryedit.jspa


   <security-constraint>
                <web-resource-collection>
                        <web-resource-name>HtmlAdaptor</web-resource-name>
                        security config that only allows users with the role 
PPShopAdmin to access shop admin pages.
                        <url-pattern>/ppwebshop/admin/*</url-pattern>
                        <http-method>GET</http-method>
                        <http-method>POST</http-method>
                </web-resource-collection>
                <auth-constraint>
                        <role-name>PPShopAdmin</role-name>
                </auth-constraint>
        </security-constraint>
        
        <login-config>
                <auth-method>BASIC</auth-method>
                <realm-name>PPWebShop Admin</realm-name>
        </login-config>
        
        <security-role>
                <role-name>PPShopAdmin</role-name>
        </security-role>


View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3846856#3846856

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3846856


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to