[jboss-jira] [JBoss JIRA] (WFLY-1113) JBoss AS 7 doesn't appear to support container-managed security via web.xml and jboss-web.xml

[Jason Greene (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-1113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jason Greene updated WFLY-1113:
-------------------------------

    Assignee: Darran Lofthouse  (was: Brian Stansberry)

    
> JBoss AS 7 doesn't appear to support container-managed security via web.xml and jboss-web.xml
> ---------------------------------------------------------------------------------------------
>
>                 Key: WFLY-1113
>                 URL: https://issues.jboss.org/browse/WFLY-1113
>             Project: WildFly
>          Issue Type: Feature Request
>          Components: Documentation
>         Environment: n/a
>            Reporter: Craig Ringer
>            Assignee: Darran Lofthouse
>
> There's no documentation for container-managed security in JBoss AS 7, and the schema for the main jboss config files and jboss-web.xml don't suggest any configuration mechanisms for JAAS realms, principal-to-user/group mappings, etc.
> This is a significant limitation for apps porting from Glassfish 3, which expect to be able to access the current security principal from JNDI or inject it, and expect to be able to declare container-controlled access to particular URLs and different HTTP methods in web.xml.
> Documenting this limitation in AS 7.0.0 would be a big improvement and would save porting time and hassle. Implementing support in a future version would, of course, be ideal.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira