[rules-users] guvnor 5.4 final turning off authentication

[Michael Anstis]

Guvnor 5.4 uses Seam 3 whereas Guvnor 5.3 used Seam 2.

At the same time the org.drools.guvnor.server.security.NilAuthenticator was
removed.

AFAIK you should be able to copy
org.drools.guvnor.server.security.DemoAuthenticator and have it
authenticate regardless of user credentials.

http://docs.jboss.org/seam/3/security/latest/reference/en-US/html/security-authentication.html#d0e212might
be of assistance.

With kind regards,

Mike

On 7 August 2012 15:20, mpgong <michael.p.gong at lmco.com> wrote:

> Hello,
>
> I'm trying to upgrade from 5.3 to 5.4 and i guess i must have configured
> 5.3
> to not authenticate when accessing the resources in guvnor like the
> binaries, etc using the REST api because when i try to access them under
> 5.4
> i'm getting the 401 response.
>
> I read that security is configured in the beans.xml i believe but not sure
> how to do it properly.  I basically want to have no authentication.  In 5.3
> i believe this was achieved changing the components.xml and adding this
> <security:identity
> authenticate-method="#{nilAuthenticator.authenticate}"/>.
>
> How do i this under 5.4?
>
> Thanks.
>
>
>
> --
> View this message in context:
> http://drools.46999.n3.nabble.com/guvnor-5-4-final-turning-off-authentication-tp4019042.html
> Sent from the Drools: User forum mailing list archive at Nabble.com.
> _______________________________________________
> rules-users mailing list
> rules-users at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/rules-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/rules-users/attachments/20120810/1338b610/attachment.html