Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@geronimo.apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Mime-Version: 1.0 (Apple Message framework v619.2)
In-Reply-To: <925104237.1115315950835.JavaMail.jira@ajax.apache.org>
References: <925104237.1115315950835.JavaMail.jira@ajax.apache.org>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <2c796c2b2623967bb368c4e6a75e5c63@yahoo.com>
Content-Transfer-Encoding: 7bit
From: David Jencks <david_jencks@yahoo.com>
Subject: Re: [jira] Commented: (GERONIMO-317) Support for method-permissions
 in the web.xml in Tomcat
Date: Thu, 5 May 2005 11:36:14 -0700
To: dev@geronimo.apache.org

FWIW I think what david is asking for here is what you get using the  
JACC tomcat realm.  I don't see method-permissions mentioned.  The idea  
is to use the geronimo permissions-role mapping rather than the  
"identity" non-mapping supplied by tomcat that IIRC you can still get  
using the tomcat JAAS realm.

david jencks

On May 5, 2005, at 10:59 AM, Jeff Genender (JIRA) wrote:

>      [  
> http://issues.apache.org/jira/browse/GERONIMO-317? 
> page=comments#action_64574 ]
>
> Jeff Genender commented on GERONIMO-317:
> ----------------------------------------
>
> David, can you be more specific by method-permissions in the web.xml?   
> I am assuming you are referring to method permissions of EJB?  AFAIK,  
> web.xml does not have method permissions.  Are you referring to the  
> web-resource and user-data constraints?  These are now supported.
>
>> Support for method-permissions in the web.xml in Tomcat
>> -------------------------------------------------------
>>
>>          Key: GERONIMO-317
>>          URL: http://issues.apache.org/jira/browse/GERONIMO-317
>>      Project: Geronimo
>>         Type: Task
>>   Components: web, Tomcat, security, deployment
>>     Reporter: David Blevins
>>     Assignee: Alan Cabrera
>
>>
>> Security roles in the web.xml should be linked to roles defined in a  
>> Geronimo security realm and not the Tomcat security realm provider.
>
> -- 
> This message is automatically generated by JIRA.
> -
> If you think it was sent incorrectly contact one of the administrators:
>    http://issues.apache.org/jira/secure/Administrators.jspa
> -
> For more information on JIRA, see:
>    http://www.atlassian.com/software/jira
>