[jboss-user] [JBoss Seam] - Re: Seam Security: authentication and authorization example

[vladimir.kovalyuk]

While debugging the configuration from the documentation

<security-config>
  | <security-constraint>
  |   <web-resource-collection>
  |     <web-resource-name>Secure Page</web-resource-name>
  |       <url-pattern>/secure/*.seam</url-pattern>
  |     </web-resource-collection>
  |     <auth-constraint>
  |       <role-name>admin</role-name>
  |     </auth-constraint>
  |   </security-constraint>
  | </security-config>

I realized that the problem is in SecurityConstraint.matchPattern(String path, String pattern)

I replaced
<url-pattern>/secure/*.seam</url-pattern>
with 
<url-pattern>/secure/*</url-pattern>

It helps.
I believe it's a bug.


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4002250#4002250

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4002250