Link to home
Start Free TrialLog in
Avatar of ahuen
ahuen

asked on

tomcat 4.0.1 jdbc realm user-role question

hi all,

how do i set tomcat not to look for a role when validating a user using jdbcrealm? if i omit the
<auth-constraint> it wont' validate anything it will just forward you to the resouce.

thanks.

    <security-constraint>
     
     <web-resource-collection>
         <web-resource-name>User Protected Area</web-resource-name>
          <url-pattern>/ovdc/*</url-pattern>
            <http-method>DELETE</http-method>
          <http-method>GET</http-method>
            <http-method>POST</http-method>
           <http-method>PUT</http-method>
      </web-resource-collection>

      <auth-constraint>
       <role-name></role-name>
      </auth-constraint>

    </security-constraint>
ASKER CERTIFIED SOLUTION
Avatar of cheekycj
cheekycj
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ahuen
ahuen

ASKER

CJ,

where? in JDBCRealm?
I am subclassing JDBCRealm.

thanks.
yes when you subclass JDBC Realm you should override the hasRole() method to always return true.. Its just an idea but it should work.

CJ
Avatar of ahuen

ASKER

awesome....

thanks.
Thanx for the "A".  Good luck.

CJ