Win a copy of The Little Book of Impediments (e-book only) this week in the Agile and Other Processes forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

No- HTTP method element??

 
trivikram Kumar
Ranch Hand
Posts: 172
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Just read in the errata...is that correct??
If there is no http method element in the security constraint,all http methods are allowed???

Just was surprised after looking at the errata??

Thanks in advance,
Javainn.
 
Narendra Dhande
Ranch Hand
Posts: 951
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

If there is no HTTP method in the security constaint, all the methods are resctrited i.e. The constarints apply to all the methods.

Thanks
 
Vishwa Kumba
Ranch Hand
Posts: 1066
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Originally posted by Narendra Dhande:
If there is no HTTP method in the security constaint, all the methods are resctrited i.e. The constarints apply to all the methods.


How about having an empty HTTP method element?. Is that allowed and if yes, what does it mean?

<security-constraint>
<web-resource-collection>
<web-resource-name>Recipes</web-resource-name>
<url-pattern>/Beer/UpdateRecipes/*</url-pattern>
<http-method></http-method>
</web-resource-collection>
<auth-constraint>
<role-name>Admin<role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
[ May 27, 2005: Message edited by: Vishwa Kumba ]
 
Narendra Dhande
Ranch Hand
Posts: 951
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

In this case ( <http-method> <http-method> ) all the methods allowed. No method is resctricted.
Thanks
 
trivikram Kumar
Ranch Hand
Posts: 172
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Narendra Dhande,

So why does the errata say the other way of not having a http-method element will allow all the methods??

So for sure the answer is all methods will be constrained....right???

Thanks a lot,

Javainn
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic