Search:

Got it to work. I modified my objectDefinitionSource for FilterSecurityInterceptor (simplified):
<value>
CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
PATTERN_TYPE_APACHE_ANT...

Thanks pea1. I suppose that would work and I will put that in my back pocket incase I can't find a more elegant solution. You can apply security to just "/". Here is my objectDefinitionSource for...

I am seeing the same issue where Acegi 1.0.3 in WAS 6.1.0.0 and 6.1.0.5 allows users to see my index.jsp where it doesn't in Tomcat. The URL to my app is "http://localhost:9080/myapp" and it gets...