Re: Sitemesh and J2EE security

Try adding this:

<dispatcher>ERROR</dispatcher>

I don't think this works on Tomcat, but it might on Jetty.

Matt

On 9/22/05, Ricardo Lecheta <[email protected]> wrote:
> > Is sounds like you may have to either move the images
> > and stylesheets, or declare their paths as open to
> > everyone (i.e.: any role can access these resources).
>
> Thank you Jay... it worked :-)
>
> I=C2=B4ve configured the web.xml like AppFuse.. Now when the logged user =
is not in required role, it redirect to the 403.ftl, like configured in the=
 web.xml, but this page isn=C3=83=C2=82=C3=82=C2=B4t decorated.
>
> I=C2=B4m using jetty-5.1.3 and here is my web.xml... Am I missing somethi=
ng ?
>
> thanks
> Ricardo
>
> <?xml version=3D"1.0" encoding=3D"ISO-8859-1"?>
> <web-app
>         xsi:schemaLocation=3D"http://java.sun.com/xml/ns/j2ee http://java=
.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
>         version=3D"2.4">
> ....
>         <filter-mapping>
>                 <filter-name>sitemesh</filter-name>
>                 <url-pattern>/*</url-pattern>
>                 <dispatcher>REQUEST</dispatcher>
>                 <dispatcher>FORWARD</dispatcher>
>         </filter-mapping>
> ....
>         <!-- User not in required role -->
>         <error-page>
>                 <error-code>403</error-code>
>                 <location>/403.ftl</location>
>         </error-page>
>
> ---------------------------------------------------------------------
> Posted via Jive Forums
> http://forums.opensymphony.com/thread.jspa?threadID=3D7061&messageID=3D15=
686#15686
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]