File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
http://aspose.com/file-tools
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

http-method element

 
janne s
Ranch Hand
Posts: 81
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi!

In chpater 12 've doubt reg <http-method> element.

in pg 634 its given that:

if a <web-resouce-collection> element contains no <http-method> elements then the collection includes the use of all Http methods on all of the URl patterns. i.e they r not constrained.


in pg 635 2nd box last para points

1) DOn't specify any <http-method> elements in the <security-constraint>, which means that all methods are constrained.

which one is ocrrect?
It would be helpful if someone cousl explain this.

Thank you
 
srinath anand
Ranch Hand
Posts: 30
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

Yes I understand it is conflicting. Here are the rules:

- if there is no <http-method> element then ALL methods are constrained.
- if there is a <http-method> element say GET then ALL methods except GET are NOT constrained i.e only GET is constrained while all others are OPEN.

Hope this clarifies it.
 
Deepa Korecherla
Ranch Hand
Posts: 197
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Originally posted by jaya merugu:
[QB]Hi!

In chpater 12 've doubt reg <http-method> element.

in pg 634 its given that:

if a <web-resouce-collection> element contains no <http-method> elements then the collection includes the use of all Http methods on all of the URl patterns. i.e they r not constrained.

-------------------------
I understand..
if u don't give any <http-method> element ...then all methods r constrained.

What if we don't specify any http-method in the <http-method> element??
Also, I have the same douBt as Jaya......
Can anyone clarify...??
 
Ranjit Jana
Ranch Hand
Posts: 30
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
One more doubt here . The http methods are constrained only for the role specified. for all other role these resources specified in url pattern is not constrained. Comment ??
 
janne s
Ranch Hand
Posts: 81
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thanks for your reply...

This what i understood

1. No <http-method> element All the methods to particular <url-pattern> are constrained.

2. <http-method> * </http-method> All the methods are constrained.

3. </http-method> All the methods are are constrained.

4. <http-method> </http-method> All the methods are are constrained.

5.<http-method> POST </http-method> only POST is constrained.

If wrong do correct.

Thank you
 
janne s
Ranch Hand
Posts: 81
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
hi

pls some one reply...
check it out and correct

thanks
jaya
 
Colin Fletcher
Ranch Hand
Posts: 200
  • 0
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
jaya, what does the spec say?
 
Don't get me started about those stupid light bulbs.
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic