[jboss-dev-forums] [JBoss AS 7 Development] - Re: isCallerInRole(...) returns wrong result

[i10]

i10 [https://community.jboss.org/people/i10] created the discussion

"Re: isCallerInRole(...) returns wrong result"

To view the discussion, visit: https://community.jboss.org/message/740069#740069

--------------------------------------------------------------
I'm using the predefined security domain *other* and added the user's with the *JBOSS_HOME/add_user.bat* Scritpt to the ApplicationRealm.

*standalone-full.xml snippet:*
<subsystem xmlns="urn:jboss:domain:security:1.1">
            <security-domains>
                <security-domain name="other" cache-type="default">
                    <authentication>
                        <login-module code="Remoting" flag="optional">
                            <module-option name="password-stacking" value="useFirstPass"/>
                        </login-module>
                        <login-module code="RealmUsersRoles" flag="required">
                            <module-option name="usersProperties" value="${jboss.server.config.dir}/application-users.properties"/>
                            <module-option name="rolesProperties" value="${jboss.server.config.dir}/application-roles.properties"/>
                            <module-option name="realm" value="ApplicationRealm"/>
                            <module-option name="password-stacking" value="useFirstPass"/>
                            <module-option name="unauthenticatedIdentity" value="guest"/>
                        </login-module>


*Servelt snippet:*
@ServletSecurity(@HttpConstraint(rolesAllowed = {"Customer", "VIP"}))
public class LoginServlet extends HttpServlet {
--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/740069#740069]

Start a new discussion in JBoss AS 7 Development at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2225]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20120606/2c1c5667/attachment.html