I think i answered my own question. I had to block the calls to the api to make it work.
[users] admin = admin123, admin user = user123 [urls] /api/version = anon /api/interpreter/** = authc, roles[admin] /api/configurations/** = authc, roles[admin] /api/credential/** = authc, roles[admin] /** = authc On Fri, Jun 10, 2016 at 8:08 AM, Tom Norden <[email protected]> wrote: > I have been trying to figure out how to get shiro to hide the Interpreter > settings page for certain users but can't seem to figure it out. I have > tried using roles and have my shiro.ini looking something like this. > > [users] > admin = admin123, admin > user = user123 > > [urls] > /api/version = anon > /interpreter = authc, roles[admin] > /** = authc > > I would expect this to allow "user" to see every thing but /interpreter, > however both "admin" and "user" can see the interpreter settings. My goal > here is hide the Interpreter settings from some users as it contains some > credentials I don't want to most users to see. > > Thanks, > Tom >
