Anonymous user in tomcat-user.xml

[Guillaume de Roujoux <gd...@kaidarausa.com>]

Hi All !

Is it possible to specify the roles associated with an anonymous user ?
I would think about putting it either in tomcat-user.xml, or in the web.xml of my application, but I couldn't find instruction on how to do it.

Thaks

Guillaume

Re: Anonymous user in tomcat-user.xml

["Craig R. McClanahan" <cr...@apache.org>]

On Fri, 19 Jul 2002, Guillaume de Roujoux wrote:

> Date: Fri, 19 Jul 2002 09:05:41 -0700
> From: Guillaume de Roujoux <gd...@kaidarausa.com>
> Reply-To: Tomcat Users List <to...@jakarta.apache.org>
> To: Tomcat Users List <to...@jakarta.apache.org>
> Subject: Anonymous user in tomcat-user.xml
>
> Hi All !
>
> Is it possible to specify the roles associated with an anonymous user ?
> I would think about putting it either in tomcat-user.xml, or in the
> web.xml of my application, but I couldn't find instruction on how to do
> it.
>

There is no such concept as an "anonymous user" in the security model.
You are either authenticated (and have the associated set of roles) or you
are not (and you don't have any).

A typical pattern for providing one would be to create a "guest" user
account with a well-known password that can have whatever roles you need
to assign.

> Thaks
>
> Guillaume
>

Craig



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>