<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<base href="x-msg://59/"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1476139784;
mso-list-type:hybrid;
mso-list-template-ids:-2143399012 134807567 134807577 134807579 134807567 134807577 134807579 134807567 134807577 134807579;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi Steve,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks for replying promptly. I have fixed this issue by replacing the following jars in guvnor.war. I debugged the guvnor code and found out that username
is null in org.jboss.seam.security.IdentityImpl..activeAuthenticator. This is a JAAS Authenticator in which user is coming null. I found it out in IdentityImpl.postAuthenticate() method.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">seam-security-3.1.0.Final.jar with seam-security-3.2.0.Final.jar
<o:p></o:p></span></p>
<p class="MsoListParagraph"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">and
<o:p></o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">seam-security-api-3.1.0.Final.jar with seam-security-api-3.2.0.Final.jar <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">It worked with all the below configurations. I have created a number of users and they are getting authenticated. But, all the users are logged in with admin
rights. I have two users which have “package.developer” rights but still those users can update any process in other packages. Even those users can update their own user permissions.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Zahid Ahmed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> rules-users-bounces@lists.jboss.org [mailto:rules-users-bounces@lists.jboss.org]
<b>On Behalf Of </b>Stephen Masters<br>
<b>Sent:</b> 15 May 2013 13:01<br>
<b>To:</b> Rules Users List<br>
<b>Subject:</b> Re: [rules-users] Error : JAAS Authentication with Guvnor 5.5.0 and Authorization Error<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">I think you may have hit this bug:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://issues.jboss.org/browse/GUVNOR-1976">https://issues.jboss.org/browse/GUVNOR-1976</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think it might be a duplicate of another, which I cant find. At root that was a Seam JAAS bug (5.5 introduced Guvnor to Seam 3), which prevented it from creating a security context. I'm not sure whether any solution was established though.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Steve<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On 15 May 2013, at 09:27, Zahid Ahmed <<a href="mailto:zahid.ahmed@emirates.com">zahid.ahmed@emirates.com</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I have run into a set of errors configuring JAAS Authentication for Guvnor. I have searched a lot on jboss community and for all the solutions
nothing is working for me. I am getting either the login popup or I am getting “This User has no permissions setup”. The Guvnor Manual is referring to jboss eap 5 and I am trying to do this on Jboss AS 7.1.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Note : I am unable to find login-config.xml file mentioned in the following link.<a href="http://docs.jboss.org/drools/release/5.5.0.Final/drools-guvnor-docs/html/ch14.html"><span style="color:purple">http://docs.jboss.org/drools/release/5.5.0.Final/drools-guvnor-docs/html/ch14.html</span></a><span class="apple-converted-space"> </span></span></i><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">.
Is guvnor deployment targeted only for JBOSS EAP 5.0 ?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Environment:</span></b><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">1.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Guvnor
5.5.0.Final</span><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">2.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">JBOSS
AS 7.1.0</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Files Configured</span></b><span class="apple-converted-space"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span></b></span><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">(<span style="background:yellow">Only
these files I configured</span>):</span></b><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">1.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Standalone.xml</span><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">2.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Guvnor.war/WEB-INF/beans.xml</span><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">3.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Created
users using “add-user.sh”</span><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">4.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">standalone/configuration/application-users.properties
(attached).</span><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">5.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">standalone/configuration/application-roles.properties
(attached)</span><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">6.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">standalone/configuration/management-users.properties</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:14.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Configurations</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><u><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Standalone.xml :</span></u></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Only configured below tags. There’s nothing else I changed for the purpose of JAAS Authentication and Guvnor Authorization. Added<span class="apple-converted-space"> </span></span><i><span style="font-size:9.0pt;font-family:"Courier New""><security-domain
name="drools-guvnor" cache-type="default"></span></i><span class="apple-converted-space"><span style="font-size:9.0pt;font-family:"Courier New""> </span></span><span style="font-size:9.0pt;font-family:"Courier New"">to check if “other” is not working.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security-domain name="other" cache-type="default"></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <authentication></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <login-module code="Remoting" flag="optional"></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="password-stacking" value="useFirstPass"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </login-module></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <login-module code="RealmUsersRoles" flag="required"></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="usersProperties" value="${jboss.server.config.dir}/application-users.properties"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="rolesProperties" value="${jboss.server.config.dir}/application-roles.properties"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="realm" value="ApplicationRealm"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="password-stacking" value="useFirstPass"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </login-module></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </authentication></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security-domain></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security-domain name="drools-guvnor" cache-type="default"></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <authentication></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required"></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="usersProperties" value="${jboss.server.config.dir}/application-users.properties"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="rolesProperties" value="${jboss.server.config.dir}/application-roles.properties"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="realm" value="ApplicationRealm"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <module-option name="password-stacking" value="useFirstPass"/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </login-module></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </authentication></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security-domain></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><u><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Drools-guvnor.war</span></u></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">.</span><o:p></o:p></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">1.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">beans.xml
(Tried 4 different configs as suggested on community)</span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">a.</span></b><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">Config
1 (</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Attached “Config1 beans.xml” and Config1 error.txt</span><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">) .<span class="apple-converted-space"> </span></span></b><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:red">Error
“This User has no permission setup”.</span></b><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:IdentityImpl></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <!-- JAAS based authentication --></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:authenticatorName>jaasAuthenticator</security:authenticatorName></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security:IdentityImpl></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:jaas.JaasAuthenticator></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <jaasConfigName>other</jaasConfigName></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security:jaas.JaasAuthenticator></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <!-- SECURITY AUTHORIZATION CONFIGURATION --></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <!--</span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> This is used to enable or disable role-based authorization. By default it is disabled.</span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> --></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <guvnorSecurity:RoleBasedPermissionResolver></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <guvnorSecurity:enableRoleBasedAuthorization>true</guvnorSecurity:enableRoleBasedAuthorization></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </guvnorSecurity:RoleBasedPermissionResolver></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">b.</span></b><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">Config
2 (</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Attached “Config2 beans.xml” and Config2 error.txt</span><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">).<span class="apple-converted-space"> </span></span></b><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:red">Error<span class="apple-converted-space"> </span></span></b><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D"> </span></b><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:red">“This
User has no permission setup”.</span></b><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:IdentityImpl></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <!-- JAAS based authentication --></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:authenticatorName>jaasAuthenticator</security:authenticatorName></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security:IdentityImpl></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:jaas.JaasAuthenticator></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal" style="text-indent:36.0pt"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"><security:jaasConfigName>drools-guvnor</security:jaasConfigName></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security:jaas.JaasAuthenticator></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <!-- SECURITY AUTHORIZATION CONFIGURATION --></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <!--</span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> This is used to enable or disable role-based authorization. By default it is disabled.</span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> --></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <guvnorSecurity:RoleBasedPermissionResolver></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <guvnorSecurity:enableRoleBasedAuthorization>true</guvnorSecurity:enableRoleBasedAuthorization></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </guvnorSecurity:RoleBasedPermissionResolver></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal" style="text-indent:-18.0pt"><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">c.</span></b><span lang="EN-US" style="font-size:7.0pt;color:#1F497D"> <span class="apple-converted-space"> </span></span><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">Config
3 (</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Attached “Config3 beans.xml” and Config<span style="background:yellow">1</span><span class="apple-converted-space"> </span>error.txt</span><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D">).<span class="apple-converted-space"> </span></span></b><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:red">Error<span class="apple-converted-space"> </span></span></b><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">(Same
error as of Config 1)</span></b><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#1F497D"> </span></b><b><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:red">“This User has no permission setup”.</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:IdentityImpl></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <!-- JAAS based authentication --></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:authenticatorName>jaasAuthenticator</security:authenticatorName></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security:IdentityImpl></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <security:jaas.JaasAuthenticator></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <jaasConfigName>other</jaasConfigName></span><o:p></o:p></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </security:jaas.JaasAuthenticator></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""><guvnorSecurity:RoleBasedPermissionResolver></span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <guvnorSecurity:enableRoleBasedAuthorization>true</guvnorSecurity:enableRoleBasedAuthorization></span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </guvnorSecurity:RoleBasedPermissionResolver></span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""><component name="org.jboss.seam.security.roleBasedPermissionResolver"></span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <s:modifies/></span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> <property name="enableRoleBasedAuthorization">true</property></span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div style="margin-left:73.5pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""></component></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><i><span style="font-size:9.0pt;font-family:"Courier New";background:yellow">I HAVE ALSO ADDED THIS COMPONENT TAG found every where on forums to resolve this issue. I tried Tried without this also but at that time I get LOGIN screen
which always says Incorrect User/Password.Is this required or</span></i></b><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"> <guvnorSecurity:RoleBasedPermissionResolver> is the only authorization config.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"><component name="org.jboss.seam.security.roleBasedPermissionResolver">;</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"> <s:modifies/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"> <property name="enableRoleBasedAuthorization">true</property></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New";background:yellow"></component></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Kindly help me in this configuration. I can’t find a single authentic document for my environment.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Regards,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Zahid</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif""><standalone.xml><Guvnor User Permission tab.png><application-roles.properties><application-users.properties><mgmt-users.properties><Config1 beans.xml><Config1 error.txt><Config2
beans.xml><Config2 error.txt><Config3 beans.xml><Config3 error.txt>_______________________________________________<br>
rules-users mailing list<br>
<a href="mailto:rules-users@lists.jboss.org"><span style="color:purple">rules-users@lists.jboss.org</span></a><br>
<a href="https://lists.jboss.org/mailman/listinfo/rules-users"><span style="color:purple">https://lists.jboss.org/mailman/listinfo/rules-users</span></a><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>