jQuery in Action, 2nd edition*
The moose likes Web Component Certification (SCWCD/OCPJWCD) and the fly likes Doubt in Security contraints Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Murach's Java Servlets and JSP this week in the Servlets forum!
JavaRanch » Java Forums » Certification » Web Component Certification (SCWCD/OCPJWCD)
Bookmark "Doubt in Security contraints" Watch "Doubt in Security contraints" New topic
Author

Doubt in Security contraints

Eusebio Floriano
Ranch Hand

Joined: Mar 07, 2004
Posts: 235
Hi,
I have an doubt when more than one <url-pattern> elements overlap.
If a <secutiry-constraint> element has no <auth-constraint> element, everyone can accesses the resource.

If a <secutiry-constraint> element has a empty <auth-constraint> element,
no one can accesses the resource.

But if both exits ? What will happen ?
Here�s a snippet.




Regards,


SCJP 1.4 / 5.0 - SCBCD 1.3 - SCWCD 1.4 - IBM 484
Serghei Jelauc
Ranch Hand

Joined: Jul 24, 2002
Posts: 128
As I know empty one - <auth-constraint/> is ALWAYS WIN.


SCJP 1.4 <br />SCBCD 1.3<br />SCWCD 1.4
Vishwa Kumba
Ranch Hand

Joined: Aug 27, 2003
Posts: 1064
I have an doubt when more than one <url-pattern> elements overlap.
If a <secutiry-constraint> element has no <auth-constraint> element, everyone can accesses the resource.

If a <secutiry-constraint> element has a empty <auth-constraint> element, no one can accesses the resource.
But if both exits ? What will happen ?

Serghei is right. In this case, nobody can access the resource!

Refer HF book, Chap 12, page: 639 (Dueling <auth-constraint> elemets table)
Eusebio Floriano
Ranch Hand

Joined: Mar 07, 2004
Posts: 235
Yes, i�ll take a look.

Thx a lot.

Regards,
trivikram Kumar
Ranch Hand

Joined: Feb 21, 2005
Posts: 172
Yeah....no one can access the resource....


Javainn<br /> <br />SCJP,SCWCD,SCBCD,<br />ICED (IBM-287,IBM-484,IBM-486)
IBM certified in DB2 V 8.1 Family Fundamentals (IBM 700)
 
 
subject: Doubt in Security contraints
 
Similar Threads
doubt upon "auth-constraint".
<security-constraint> doubt
<web-resource-collection>
Security Doubt
Marcus Green Quiz 1 - Mock Exam Question Doubt