[jboss-dev-forums] [Design of JBoss ESB] - Re: Http Gateway - requirements please...

OK... so I think I eventually got it generating the security bits. Was a bit of pita :) It looks slightly different from above, but amounts to the same thing. So the http-provider definition (inside the jboss-esb.xml) is now looking like.... | <http-provider name="http"> | <http-bus busid="ordermgt" /> | | <http-bus busid="sales"> | <allowed-roles> | <role name="friend" /> | </allowed-roles> | <protected-methods> | <method name="GET" /> | </protected-methods> | </http-bus> | | <auth method="BASIC" domain="java:/jaas/AcmeSecProvider" /> | </http-provider> | How the roles and methods are currently working can be summed up as follows... | Methods Specified | Roles Specified | Login Required | ---------------------------------------------------------------------------- | No | No | No | No | Yes | For All Methods | Yes | Yes | For Specified Methods | Yes | No | No - Specified Methods blocked to all | I think this is right, yeah? Note how the security domain can be configured on the auth element. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4248109#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...