Win a copy of Java Mock Exams (software) this week in the Programmer Certification (OCPJP) forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic

No- HTTP method element??

 
trivikram Kumar
Ranch Hand
Posts: 172
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Just read in the errata...is that correct??
If there is no http method element in the security constraint,all http methods are allowed???

Just was surprised after looking at the errata??

Thanks in advance,
Javainn.
 
Narendra Dhande
Ranch Hand
Posts: 951
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

If there is no HTTP method in the security constaint, all the methods are resctrited i.e. The constarints apply to all the methods.

Thanks
 
Vishwa Kumba
Ranch Hand
Posts: 1066
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Originally posted by Narendra Dhande:
If there is no HTTP method in the security constaint, all the methods are resctrited i.e. The constarints apply to all the methods.


How about having an empty HTTP method element?. Is that allowed and if yes, what does it mean?

<security-constraint>
<web-resource-collection>
<web-resource-name>Recipes</web-resource-name>
<url-pattern>/Beer/UpdateRecipes/*</url-pattern>
<http-method></http-method>
</web-resource-collection>
<auth-constraint>
<role-name>Admin<role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
[ May 27, 2005: Message edited by: Vishwa Kumba ]
 
Narendra Dhande
Ranch Hand
Posts: 951
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

In this case ( <http-method> <http-method> ) all the methods allowed. No method is resctricted.
Thanks
 
trivikram Kumar
Ranch Hand
Posts: 172
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Narendra Dhande,

So why does the errata say the other way of not having a http-method element will allow all the methods??

So for sure the answer is all methods will be constrained....right???

Thanks a lot,

Javainn
 
What are you doing? You are supposed to be reading this tiny ad!
the new thread boost feature brings a LOT of attention to your favorite threads
https://coderanch.com/t/674455/Thread-Boost-feature
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!