Hi Paul, I would think each war would declare its own ShiroFilter. The ShiroFilter would probably reference the Shiro SecurityManager that is created once by your EAR. That is, something in the EAR creates a single Shiro SecurityManager instance, and that instance is referenced by all the WAR files when building the war's specific ShiroFilter instance (which secures its own URLs).
Does that make sense? Les On Mon, Jan 10, 2011 at 7:52 AM, Paul Merlin <[email protected]> wrote: > Hey, > > Let's say you have an application packaged as an EAR containing multiple WARs. > Each WAR expose some URLs that you want to filter with Shiro. > > How would one setup Shiro in such a case ? Should each WAR declare it's own > filters and URLs ? > > /Paul
