JACC: Security Constraint missing an auth-constraint needs an unchecked permission ---------------------------------------------------------------------------------- Key: SECURITY-63 URL: http://jira.jboss.com/jira/browse/SECURITY-63 Project: JBoss Security and Identity Management Issue Type: Task Security Level: Public (Everyone can see) Components: AS-Integration Affects Versions: 2.0.GA Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: 2.0.1.BETA Given a snippet <security-constraint> <web-resource-collection> <web-resource-name>MyBit4</web-resource-name> <url-pattern>/unchecked.jsp</url-pattern> <http-method>POST</http-method> <http-method>GET</http-method> </web-resource-collection> <user-data-constraint> <transport-guarantee>NONE</transport-guarantee> </user-data-constraint> </security-constraint> This requires an unchecked permission added to the policy as follows: WebResourcePermission("/unchecked.jsp", (String) null)) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira