Re: [appfuse-user] Security configuration Solution

2007-11-21 Thread Campa
Hi guys, I have found solution myself and I share here the solution. Patient model is related many-to-many with appfuse.User , so adding ROLE_USER here (security.xml): .. org.appfuse.service.UserManager.getUsers=ROLE_ADMIN,ROLE_USER

Re: [appfuse-user] Security configuration

2007-11-21 Thread Campa
Rob Hills wrote: > > Hi Stefano, > > Campa wrote: >> Hi, >> >> I'm using appfuse 2.0 with struts 2. >> I cannot understand because requesting a url like >> http://...8080/patient/list.html, logged with a user with only >> "ROLE_USER" >> the security layer give me an ExceptionPage ( >> org.acegi

Re: [appfuse-user] Security configuration

2007-11-21 Thread Campa
Mike Horwitz wrote: > > On Nov 21, 2007 11:33 AM, Campa <[EMAIL PROTECTED]> wrote: > >> >> Hi, >> >> I'm using appfuse 2.0 with struts 2. >> I cannot understand because requesting a url like >> http://...8080/patient/list.html, logged with a user with only >> "ROLE_USER" >> the security layer

Re: [appfuse-user] Security configuration

2007-11-21 Thread Rob Hills
Hi Stefano, Campa wrote: Hi, I'm using appfuse 2.0 with struts 2. I cannot understand because requesting a url like http://...8080/patient/list.html, logged with a user with only "ROLE_USER" the security layer give me an ExceptionPage ( org.acegisecurity.AccessDeniedException: Access is denied

Re: [appfuse-user] Security configuration

2007-11-21 Thread Michael Horwitz
On Nov 21, 2007 11:33 AM, Campa <[EMAIL PROTECTED]> wrote: > > Hi, > > I'm using appfuse 2.0 with struts 2. > I cannot understand because requesting a url like > http://...8080/patient/list.html, logged with a user with only "ROLE_USER" > the security layer give me an ExceptionPage ( > org.acegise

[appfuse-user] Security configuration

2007-11-21 Thread Campa
Hi, I'm using appfuse 2.0 with struts 2. I cannot understand because requesting a url like http://...8080/patient/list.html, logged with a user with only "ROLE_USER" the security layer give me an ExceptionPage ( org.acegisecurity.AccessDeniedException: Access is denied ). It not block user with A