roller/metadata/xdoclet web-security.xml,1.2,1.3

Update of /cvsroot/roller/roller/metadata/xdoclet
In directory sc8-pr-cvs1:/tmp/cvs-serv14716/metadata/xdoclet

Modified Files:
        web-security.xml 
Log Message:
Some changes for AtomServlet - not working yet.

Index: web-security.xml
===================================================================
RCS file: /cvsroot/roller/roller/metadata/xdoclet/web-security.xml,v
retrieving revision 1.2
retrieving revision 1.3
diff -C2 -d -r1.2 -r1.3
*** web-security.xml    27 May 2003 00:46:30 -0000      1.2
--- web-security.xml    3 Sep 2003 22:03:56 -0000       1.3
***************
*** 7,10 ****
--- 7,42 ----
      </resource-ref>
  
+ <!-- ***** container-managed-security is letting me down ******* -->
+ <!-- GET access is unrestrained for AtomServlet -->
+ <!--security-constraint>
+     <web-resource-collection>
+         <web-resource-name>AtomServlet</web-resource-name>
+         <description>Anyone can GET/POST from the AtomServlet.
+         Several "Verbs" require authentication.</description>
+         
+         <url-pattern>/atom/*</url-pattern>
+         <http-method>GET</http-method>
+         <http-method>POST</http-method>
+     </web-resource-collection>
+ </security-constraint-->
+ <!--security-constraint>
+ 
+     <web-resource-collection>
+         <web-resource-name>AtomServlet</web-resource-name>
+         <description>Only allow editors to Put/Delete from the 
AtomServlet.</description>
+         
+         <url-pattern>/atom/*</url-pattern>
+         
+         <http-method>PUT</http-method>
+         <http-method>DELETE</http-method>
+     </web-resource-collection>
+ 
+     <auth-constraint>
+         <description>Only let admins log in</description>
+         <role-name>editor</role-name>
+     </auth-constraint>
+ 
+ </security-constraint-->
+ 
  <!-- Only allow editors to access edit-*.jsp pages -->
  <security-constraint>
***************
*** 46,50 ****
          <http-method>GET</http-method>
      </web-resource-collection>
! 
      <auth-constraint>
          <description>Only let editors log in</description>
--- 78,82 ----
          <http-method>GET</http-method>
      </web-resource-collection>
!     
      <auth-constraint>
          <description>Only let editors log in</description>




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf