Re: @DenyAll does nothing

2011-03-02 Thread Mark Thomas
On 02/03/2011 14:53, Michael McCutcheon wrote: > However, I downloaded the Servlet 3.0 spec and used the exact examples > from the security chapter, and it still seems to ignore the annotations > completely: > > I copied these right from the spec: > > @ServletSecurity(@HttpConstraint(transportGua

Re: @DenyAll does nothing

2011-03-02 Thread Michael McCutcheon
On 3/2/2011 4:12 AM, Mark Thomas wrote: On 02/03/2011 06:54, Michael McCutcheon wrote: I'm using Tomcat 7.0.8. I have a servlet with a doGet method that has a @DenyAll annotation applied to it. However, when I run the servlet, it seems to make no difference, and doGet is still called. It was

Re: @DenyAll does nothing

2011-03-02 Thread Mark Thomas
On 02/03/2011 06:54, Michael McCutcheon wrote: > I'm using Tomcat 7.0.8. > > I have a servlet with a doGet method that has a @DenyAll annotation > applied to it. > > However, when I run the servlet, it seems to make no difference, and > doGet is still called. > > It was my understanding that @De

@DenyAll does nothing

2011-03-01 Thread Michael McCutcheon
I'm using Tomcat 7.0.8. I have a servlet with a doGet method that has a @DenyAll annotation applied to it. However, when I run the servlet, it seems to make no difference, and doGet is still called. It was my understanding that @DenyAll was supposed to prevent access to the method on which