How to enable RequestFlow/ Authorization Check in Axis.

["Ramaswamy, Muthu" <mr...@gers.com>]

Hi All-

I am using Axis Beta 2 Version. Deployed the stock service found in the
samples/stock directory, using the deploy.wsdd file also found in the
directory. I am trying to get familiar with Axis by running this example.

I can list the services deployed. When I invoked the service, AxisEngine
didn't validate the user. It executed it without authorization errors. The
users.lst and perms.lst were copied to the WEB-INF directory from the
samples/stock.

java samples.stock.GetInfo -uxyz -wabc IBM address

I got the following: IBM: Armonk, NY 

I was expecting the AxisServer to produce some authorization error beacuse
"xyz" is not a valid user. 

Do I have to enable any other settings?

The deploy.wsdd file contains the request flow "checks" and the handlers are
not being executed.

Any input would be of great help. 

Thank You.,

<deployment name="test" xmlns="http://xml.apache.org/axis/wsdd/" 
    xmlns:java="http://xml.apache.org/axis/wsdd/providers/java">

  <service name="urn:xmltoday-delayed-quotes" provider="java:RPC">
    <parameter name="className" value="samples.stock.StockQuoteService"/>
    <parameter name="allowedMethods" value="getQuote test"/>
    <parameter name="allowedRoles" value="user1,user2"/>

    <requestFlow name="checks">
      <handler
type="java:org.apache.axis.handlers.SimpleAuthenticationHandler"/>
      <handler
type="java:org.apache.axis.handlers.SimpleAuthorizationHandler"/>
    </requestFlow>
  </service>

  <service name="urn:cominfo" provider="java:RPC">
    <parameter name="className" value="samples.stock.ComInfoService" />
    <parameter name="allowedMethods" value="getInfo" />
    <parameter name="allowedRoles" value="user3"/>
    <requestFlow type="checks"/>
  </service>

</deployment>