[seam-dev] Seam Security security.drl

Marek Schmidt maschmid at redhat.com
Wed Jul 20 07:46:02 EDT 2011


Hi all,

looking at https://issues.jboss.org/browse/SEAMSECURITY-81, I am not 
sure, what is the intended location of the security.drl file?

The examples have it in WEB-INF/security.drl, but that doesn't work 
except on AS6.

The SecurityRuleProducer injects the file using:

> @Inject
> @org.jboss.seam.solder.resourceLoader.Resource("security.drl")
 > InputStream securityRules;

So I am not sure which of these are true statements:

1. Seam Security examples are wrong, the file should be moved to servlet 
context root
2. Seam Security impl is wrong, it should @Inject it from 
"WEB-INF/security.drl"
3. Seam Solder on AS7/Glassfish is wrong, it should pick up the file 
WEB-INF/security.drl using just the @Resource("security.drl") on these 
platforms
4. Seam Solder on AS6 is wrong, it should not pick up the file 
WEB-INF/security.drl using just the @Resource("security.drl") on AS6.

Cheers,

Marek Schmidt


More information about the seam-dev mailing list