Sitemesh and J2EE security

> Is sounds like you may have to either move the images
> and stylesheets, or declare their paths as open to
> everyone (i.e.: any role can access these resources).

Thank you Jay... it worked :-)

I=C3=82=C2=B4ve configured the web.xml like AppFuse.. Now when the logged u=
ser is not in required role, it redirect to the 403.ftl, like configured in=
 the web.xml, but this page isn=C3=83=C2=83=C3=82=C2=82=C3=83=C2=82=C3=82=
=C2=B4t decorated.

I=C3=82=C2=B4m using jetty-5.1.3 and here is my web.xml... Am I missing som=
ething ?

thanks
Ricardo

<?xml version=3D"1.0" encoding=3D"ISO-8859-1"?>
<web-app
=09xsi:schemaLocation=3D"http://java.sun.com/xml/ns/j2ee http://java.sun.co=
m/xml/ns/j2ee/web-app_2_4.xsd"
=09version=3D"2.4">
....
=09<filter-mapping>
=09=09<filter-name>sitemesh</filter-name>
=09=09<url-pattern>/*</url-pattern>
=09=09<dispatcher>REQUEST</dispatcher>
=09=09<dispatcher>FORWARD</dispatcher>
=09</filter-mapping>
....
=09<!-- User not in required role -->
=09<error-page>
=09=09<error-code>403</error-code>
=09=09<location>/403.ftl</location>
=09</error-page>

---------------------------------------------------------------------
Posted via Jive Forums
http://forums.opensymphony.com/thread.jspa?threadID=3D7061&messageID=3D1568=
6#15686


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]