Hello
I am trying to move my cocoon applications from cocoon-2.1.10 to
cocoon-2.2.0. I cannot make the tomcat security (realm) work with
cocoon-2.2.0 so I tried to use authentication block instead.
=== My application context ===
<bean name="org.apache.cocoon.auth.SecurityHandler/simple"
class="org.apache.cocoon.auth.impl.SimpleSecurityHandler"
scope="singleton">
<property name="userProperties">
<value>
manager=mana
manager.roles=admin_admin
agent001=agen
agent001.roles=admin_user
</value>
</property>
</bean>
<bean name="org.apache.cocoon.auth.Application/cocoon-app"
class="org.apache.cocoon.auth.impl.StandardApplication"
scope="singleton">
<property name="securityHandler"
ref="org.apache.cocoon.auth.SecurityHandler/simple"/>
</bean>
=== My sitemap ===
<map:match pattern="">
<map:redirect-to uri="login"/>
</map:match>
<map:match pattern="home">
<map:act type="cauth-is-logged-in">
<map:parameter name="application" value="cocoon-app"/>
<map:generate src="menu/home.xml"/>
<map:transform type="role-filter"/>
<map:transform type="i18n"><map:parameter name="locale"
value="{request:locale}"/></map:transform>
<map:serialize type="xhtml"/>
</map:act>
<map:redirect-to uri="login"/>
</map:match>
<map:match pattern="login">
<map:act type="cauth-is-logged-in">
<map:parameter name="application" value="cocoon-app"/>
<map:redirect-to uri="home"/>
</map:act>
<map:generate src="menu/login.xml"/>
<map:transform type="i18n"><map:parameter name="locale"
value="{request:locale}"/></map:transform>
<map:serialize type="xhtml"/>
</map:match>
<map:match pattern="j_security_check">
<map:act type="cauth-login">
<map:parameter name="application" value="cocoon-app" />
<map:parameter name="name" value="{request-param:j_username}" />
<map:parameter name="password" value="{request-param:j_password}"
/>
<map:redirect-to uri="home" />
</map:act>
<map:redirect-to uri="error" />
</map:match>
It looks like it logs in correctly, goes to home and displays menu/
home.xml, but the role-filter transformation can't see admin_admin role.
How to define roles in SimpleSecurityHandler? Are they recognised by
role-filter transformer?
My users are in MySQL database. I use Hibernate. Should I use
DAOSecurityHandler to get my users? How to use DAOSecurityHandler?
Best regards
Barbara
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
