• Post Reply Bookmark Topic Watch Topic
  • New Topic

Question about constraints

 
Marcel Koopman
Greenhorn
Posts: 11
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
<http-method>GET</http-method>

<auth-constraint>
<role-name>Admin</role-name>
</auth-constraint>

Does this mean that you have to be Admin to be able to do GET?
And all other http mehods are not allowed right? And only Admin can login with GET?
 
sravanthi pulukuri
Ranch Hand
Posts: 125
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
hii,

It means only GET method can be Accesed by Admin..There is no restriction on the other methods.
 
Poonam Agarwal
Ranch Hand
Posts: 324
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
think this way... GET method is retricted one AND only admin allowed to do so.
all the other HTTP methods , which are not listed all are unconstraints. all are allowed by other users including Admin also.

More on it: If you do not specify a list of constarint HTTP methods all are become Restricted, and only aloowed by the role mention in the
<auth-containts> element


hope this help... keep posting
 
Poonam Agarwal
Ranch Hand
Posts: 324
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
think this way... GET method is retricted one AND only admin allowed to do so.
all the other HTTP methods , which are not listed all are unconstraints. all are allowed by other users including Admin also.

More on it: If you do not specify a list of constarint HTTP methods all are become Restricted, and only aloowed by the role mention in the
<auth-containts> element


hope this help... keep posting
 
Gravity is a harsh mistress. But this tiny ad is pretty easy to deal with:
the new thread boost feature: great for the advertiser and smooth for the coderanch user
https://coderanch.com/t/674455/Thread-Boost-feature
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!