i am using 1.9.4, and navigation scheme is similar to appfuse with struts.
problem is when app_user has only one role "user" it can not access any link
which has following type of declaration:

/users.html*=admin,user

in this case, if user is admin or both roles are permitted, but if app_user
has only "user", clicking on this link throws access denied.




Michael Horwitz wrote:
> 
> Two more questions: 1) which version of AppFuse are you using?  and 2) do
> you have a specific example of this not working? i.e. trying to access a
> page, on first login, etc? In order to understand your problem it is
> important we get a feel for how navigation works in your site.
> 
> Mike.
> 
> On 7/1/07, PSI <[EMAIL PROTECTED]> wrote:
>>
>>
>> here is it....
>>
>>
>> PSI wrote:
>> >
>> > Hi!
>> >
>> > I have following setup for spring security for acegi, and when my app
>> user
>> > having role only "user", it does not work, It shows access denied?
>> >
>> >
>> >         <property name="objectDefinitionSource">
>> >             <value>
>> >                 PATTERN_TYPE_APACHE_ANT
>> >                 /clickstreams.jsp*=admin
>> >                 /flushCache.*=admin
>> >                 /passwordHint.html*=ROLE_ANONYMOUS,admin,user
>> >                 /reload.*=admin
>> >                 /signup.html*=ROLE_ANONYMOUS,admin,user
>> >                 /users.html*=admin
>> >                 /frameset.jsp*=admin,user
>> >                 /**/*.html*=admin,user
>> >             </value>
>> >
>>
>> --
>> View this message in context:
>> http://www.nabble.com/Acegi-security-and-with-role%3D%22user%22-tf4002280s2369.html#a11386098
>> Sent from the AppFuse - User mailing list archive at Nabble.com.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Acegi-security-and-with-role%3D%22user%22-tf4002280s2369.html#a11386248
Sent from the AppFuse - User mailing list archive at Nabble.com.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to