[jboss-as7-dev] Web Authorization and Audit

Anil Saldhana Anil.Saldhana at redhat.com
Tue Oct 18 10:15:42 EDT 2011


No,  I need to add the audit to the authorization section of JBossWebRealm.

On 10/18/2011 09:14 AM, Marcus Moyses wrote:
> jboss-metadata-Beta14 is already being used in pom.xml so you already
> have the parsing of disable-audit element in jboss-web.xml.
>
> On 10/18/2011 12:09 PM, Anil Saldhana wrote:
>> Marcus,
>>      this is in regard to your proposed changes to JBossWebRealm for the
>> authorization bits.
>>
>> https://github.com/mmoyses/jboss-as/commit/ba3c43f8dfc9c201098392c5ebf90474e49aa5a8
>>
>> Previously, AS5/6, we had the JBoss Authorization enabled by default.
>> IMO for AS7, you have taken the right approach to allow user to
>> configure whether to use JBoss Authz via jboss-web.xml setting.
>>
>> We need to get this merged asap such that I can finish the auditing task
>> I am currently working on.
>>
>> Regards,
>> Anil


More information about the jboss-as7-dev mailing list