security-constraint in web.xml - order/priority

[Mats Eklund <ma...@yahoo.com>]

Hi,

If I have more than one security-constraint tags in my web.xml (some with, some without auth-constraints), which one takes precedence for a specific request?

Thanks,
Mats



      

RE: security-constraint in web.xml - order/priority

["Caldarale, Charles R" <Ch...@unisys.com>]

> From: Mats Eklund [mailto:mats.eklund@yahoo.com]
> Subject: security-constraint in web.xml - order/priority
> 
> If I have more than one security-constraint tags in my web.xml (some
> with, some without auth-constraints), which one takes precedence for a
> specific request?

Generally, the longest match.  However, you really should read section 12 of the servlet spec, in particular SRV.12.7.

http://jcp.org/aboutJava/communityprocess/mrel/jsr154/index2.html

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org