From tomcat-user-return-47283-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org Tue Sep 11 16:48:52 2001
Return-Path: <tomcat-user-return-47283-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 74278 invoked by uid 500); 11 Sep 2001 16:48:52 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: tomcat-user@jakarta.apache.org
list-help: <mailto:tomcat-user-help@jakarta.apache.org>
list-unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
list-post: <mailto:tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Delivered-To: moderator for tomcat-user@jakarta.apache.org
Received: (qmail 38656 invoked from network); 11 Sep 2001 14:37:30 -0000
Message-ID: <C10FC87CB778D211964600805F315E8001516FFF@debage46.bertelsmann.de>
From: Meinolf.Schulte-Doeinghaus@Bertelsmann.de
To: tomcat-user@jakarta.apache.org
Subject: What is the guest role within Tomcat - web.xml?
Date: Tue, 11 Sep 2001 16:34:22 +0200
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

Hi,
I have created a WebApplication with tomcat 3.2
and gave security rights to a directory called 'test'
to a special role admin. Within this directory I want 
to create a subdirectory called 'img' that could be
used by everyone. 

How do I implement this in the web.xml descriptor?
I tried to do the following, but the role NONE doesn't work
with tomcat. I also tried guest, everyone, default ...

Any suggestions?

Regards
Meinolf


----------- 
web.xml

<security-constraint>
<web-resource-collection>
<web-resource-name>/test/*</web-resource-name>
<url-pattern>/test/*</url-pattern>
</web-resource-collection>

<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
</security-constraint>


<security-constraint>
<web-resource-collection>
<web-resource-name>/test/img/*</web-resource-name>
<url-pattern>/test/img/*</url-pattern>
</web-resource-collection>

<auth-constraint>
<role-name>NONE</role-name>
</auth-constraint>
</security-constraint>


<login-config>
<auth-method>BASIC</auth-method>
<realm-name>Templates</realm-name>
</login-config>


-----------