security-roles: application.xml vs web.xml  
Author Message
Jan Van Lysebeth





PostPosted: 2004-1-30 7:36:00 Top

java-programmer, security-roles: application.xml vs web.xml Hi,

does anybody know how a webmodule behaves when It is assemble in an ear
containing the web module and I include security-roles in both the
application.xml and web.xml? I have been browsing both the j2ee and servlet
specs, but I haven't found any description of mandated behaviour. I have
tested a little with sun one appserver7. This appserver seems to ignore the
security-roles defined in the web.xml. What's more, don't mentioning
security-roles in the application.xml and only use the web.xml for mapping
security-roles breaks the login process.

Does all this mean that security-roles in the web.xml file can only be used
for standalone web applications and not for web modules who are part of an
ear?

Cheers
Jan