Return-Path: 
 <tomcat-user-return-92211-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 57352 invoked from network); 6 Feb 2004 19:31:36 -0000
Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12)
  by minotaur-2.apache.org with SMTP; 6 Feb 2004 19:31:36 -0000
Received: (qmail 36199 invoked by uid 500); 6 Feb 2004 19:30:46 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 36160 invoked by uid 500); 6 Feb 2004 19:30:45 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 36073 invoked from network); 6 Feb 2004 19:30:44 -0000
Received: from unknown (HELO main.gmane.org) (80.91.224.249)
  by daedalus.apache.org with SMTP; 6 Feb 2004 19:30:44 -0000
Received: from list by main.gmane.org with local (Exim 3.35 #1 (Debian))
	id 1ApBge-0000MQ-00
	for <tomcat-user@jakarta.apache.org>; Fri, 06 Feb 2004 20:30:48 +0100
Received: from p508e7fe5.dip.t-dialin.net ([80.142.127.229])
        by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
        id 1AlnuQ-0007hv-00
        for <tomcat-user@jakarta.apache.org>; Fri Feb  6 19:30:48 2004
Received: from yannc76 by p508e7fe5.dip.t-dialin.net with local (Gmexim 0.1
 (Debian))
        id 1AlnuQ-0007hv-00
        for <tomcat-user@jakarta.apache.org>; Fri Feb  6 19:30:48 2004
X-Injected-Via-Gmane: http://gmane.org/
To: tomcat-user@jakarta.apache.org
From: "Yann Cebron" <yannc76@yahoo.de>
Subject: [Repost] TC 5.0.18: behaviour of <security-constraint> changed??
Date: Fri, 6 Feb 2004 20:31:05 +0100
Lines: 30
Message-ID: <c00q15$i9r$1@sea.gmane.org>
X-Complaints-To: usenet@sea.gmane.org
X-Gmane-NNTP-Posting-Host: p508e7fe5.dip.t-dialin.net
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
Sender: news <news@sea.gmane.org>
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

Hi,

I have a strange problem with my Struts-Webapp (nightly build) on 5.0.18 -
every TC version before worked like expected (4.1.x as well as 5.1.x. but
maybe I'm getting the SERVLET2.4 spec wrong, and some changes have been made
to 5.0.18 regarding this aspect).

I have declared a <security-constraint> with no (empty element) assigned
roles for a whole subdirectory containing my JSP pages and other stuff:
<url-pattern>/s/*</url-pattern>. Now direct access to this directory and the
pages is not possible anymore, everything has to be accessed with the
corresponding Struts-Actions.

Now comes my problem: *every* Struts-Action whose path starts with the
character 's' (just like my protected subdir is named) does not work
anymore - TC pops in and wants me to authenticate. Apparently TC is trying
to access "/context/s/" instead of executing "/context/someaction.do" which
would call the ActionForward "/s/mypage.jsp".

I know I can put the stuff as well under /WEB-INF/ to protect the pages, but
I'm just curious why it does not behave like it did before.

Thanks in advance,

Yann







---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org