Win a copy of Functional Reactive Programming this week in the Other Languages forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Q:security-role-ref

 
Henrik Krievs
Ranch Hand
Posts: 60
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Howdy !

I'm a bit confused about <security-role-ref>.

If I have a user mapped to "manager" in tomcat-users.xml - and do a

<security-role-ref>
<role-name>admin</role-name>
<role-link>manager</role-link>
</security-role-ref>

- then a check on isUserInRole("admin") == true as is isUserInRole("manager") - fair enough !

If I add an additional mapping (same servlet)

<security-role-ref>
<role-name>manager</role-name>
<role-link>another_role</role-link>
</security-role-ref>

- then the above check still responds with 2 times true !

What did I miss out her ?

/Rgds, Henrik
Something really fancy in the signature
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic