[imm102]

Hey

does anyone know if there are any xdoclet tags for security constraints in the web.xml. I set up my security then ran xdoclet and it wiped it all out. AHH!! Is there a way to hard code these values in. Otherwise this means i can’t use XDoclet. There is support for security roles but not for security constraints. Seems a bit odd.

Cheers
Ian

[Riyad Kalla]

Moving to OT > Soft Dev, this is an XDoclet issue.

[Greg]

Can you post an example web.xml file with the correct security constraints in it? There is likely a merge file for web.xml that you can specify these contraints in a seperate file and xdoclet will merge them in.

[imm102]

<security-constraint>
<web-resource-collection>
<web-resource-name>HtmlAdaptor</web-resource-name>
<description>Pages accessible to both Users and Admin</description>
<url-pattern>/device-command.jsp</url-pattern>
<url-pattern>/device-info.jsp</url-pattern>
<url-pattern>/device-viewer.jsp</url-pattern>
<url-pattern>/macro-add.jsp</url-pattern>
<url-pattern>/macro-addname.jsp</url-pattern>
<url-pattern>/macro-admin.jsp</url-pattern>
<url-pattern>/macro-failure.jsp</url-pattern>
<url-pattern>/macro-process.jsp</url-pattern>
<url-pattern>/macro-processcomplete.jsp</url-pattern>
<url-pattern>/macro-processname.jsp</url-pattern>
<url-pattern>/macro-refresh.jsp</url-pattern>
<url-pattern>/macro-remove.jsp</url-pattern>
<url-pattern>/macro-success.jsp</url-pattern>
<url-pattern>/main.jsp</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>Admin</role-name>
<role-name>User</role-name>
</auth-constraint>
</security-constraint>

that sorta stuff

and the login-congfig

<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/login-error.jsp</form-error-page>
</form-login-config>
</login-config>

I looked on the Xdoclet website and bizarely there are tags for security roles and nothing for this even though its part of the web.xml specification and they go together.

Cheers
Ian

[Author]

Posts