• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
Sheriffs:
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
Bartenders:
  • Mikalai Zaikin

http-method element

 
Ranch Hand
Posts: 81
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi!

In chpater 12 've doubt reg <http-method> element.

in pg 634 its given that:

if a <web-resouce-collection> element contains no <http-method> elements then the collection includes the use of all Http methods on all of the URl patterns. i.e they r not constrained.


in pg 635 2nd box last para points

1) DOn't specify any <http-method> elements in the <security-constraint>, which means that all methods are constrained.

which one is ocrrect?
It would be helpful if someone cousl explain this.

Thank you
 
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi,

Yes I understand it is conflicting. Here are the rules:

- if there is no <http-method> element then ALL methods are constrained.
- if there is a <http-method> element say GET then ALL methods except GET are NOT constrained i.e only GET is constrained while all others are OPEN.

Hope this clarifies it.
 
Ranch Hand
Posts: 197
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

Originally posted by jaya merugu:
[QB]Hi!

In chpater 12 've doubt reg <http-method> element.

in pg 634 its given that:

if a <web-resouce-collection> element contains no <http-method> elements then the collection includes the use of all Http methods on all of the URl patterns. i.e they r not constrained.

-------------------------
I understand..
if u don't give any <http-method> element ...then all methods r constrained.

What if we don't specify any http-method in the <http-method> element??
Also, I have the same douBt as Jaya......
Can anyone clarify...??

 
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
One more doubt here . The http methods are constrained only for the role specified. for all other role these resources specified in url pattern is not constrained. Comment ??
 
janne s
Ranch Hand
Posts: 81
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Thanks for your reply...

This what i understood

1. No <http-method> element All the methods to particular <url-pattern> are constrained.

2. <http-method> * </http-method> All the methods are constrained.

3. </http-method> All the methods are are constrained.

4. <http-method> </http-method> All the methods are are constrained.

5.<http-method> POST </http-method> only POST is constrained.

If wrong do correct.

Thank you
 
janne s
Ranch Hand
Posts: 81
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
hi

pls some one reply...
check it out and correct

thanks
jaya
 
Ranch Hand
Posts: 200
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
jaya, what does the spec say?
 
Consider Paul's rocket mass heater.
reply
    Bookmark Topic Watch Topic
  • New Topic