Hi,
Can someone help me out ?
deployment descriptor :
<servlet-mapping>
<servlet-name>SecuredServlet</servlet-name>
<url-pattern>/secured</url-pattern>
</servlet-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>
test</web-resource-name>
<url-pattern>/secured</url-pattern>
<http-method>get</http-method>
<http-method>post</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
</security-constraint>
Nevertheless, my browser can reach SecuredServlet without any authentication, as if there is no security issued in the deployment descriptor
thanks
