Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <4D6DE9AD.5030104@att.net>
Date: Tue, 01 Mar 2011 22:54:37 -0800
From: Michael McCutcheon <michael.mccutcheon@att.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US;
 rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: @DenyAll does nothing
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

I'm using Tomcat 7.0.8.

I have a servlet with a doGet method that has a @DenyAll annotation 
applied to it.

However, when I run the servlet, it seems to make no difference, and 
doGet is still called.

It was my understanding that @DenyAll was supposed to prevent access to 
the method on which it is applied.

Do I need to turn something on to get Tomcat to recognize the security 
annotations?  I can't get any of the security annotations to do anything.

Thanks for any help,
Mike


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org