Unauthorized users get 403

[David Newman <dn...@maraudingpirates.org>]

I have setup an application in tomcat 5.5.9 with FORM based
authentication.  Everything works, however, I've noticed that if a user
successfully authenticates, but is not authorized by being in the
specified role, they get the 403 not authorized page.  I would prefer
they just get the login page again.  Is this possible?

-Dave


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Unauthorized users get 403

[Hardik Tank <ha...@yahoo.com>]

you can configure web.xml file with following entry,

<error-page>
  <error-code>403</error-code>
  <location>/errorPage403.jsp</location>
</error-page>

you can show proper error message in errorPage403.jsp
page or if u want to show login page then put
'login.jsp?error=403' as location and handle the
passed parameter in login.jsp page

Rgds,
Hardik 


--- David Newman <dn...@maraudingpirates.org> wrote:

> I have setup an application in tomcat 5.5.9 with
> FORM based
> authentication.  Everything works, however, I've
> noticed that if a user
> successfully authenticates, but is not authorized by
> being in the
> specified role, they get the 403 not authorized
> page.  I would prefer
> they just get the login page again.  Is this
> possible?
> 
> -Dave
> 
> 
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail:
> tomcat-user-help@jakarta.apache.org
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org