roles

[nox]

hi guys,

a bit confused here.

/secure/main/*=ROLE_ADMIN,ROLE_APP
/secure/app/*=ROLE_APP


if the user has granted authority of ROLE_APP only he can't access main. is this the default behaviour? or should i add ROLE_ADMIN to the user such that in order to access /secure/main he has to have the granted roles of both ROLE_APP and ROLE_ADMIN?

thanks in advance!


cheers!

nox

[gmansoor]

ROLE_APP can access both /secure/main/* & /secure/app/*
ROLE_ADMIN can only access /secure/main/*

[nox]

hi gmansoor!

thanks for the reply.

so

ROLE_APP can access both /secure/main/* & /secure/app/*
ROLE_ADMIN can only access /secure/main/*

hmmmnn... this is not the behaviour of acegi on my app however. wonder what am doing wrong??? i followed the standard contact webapp config.

in my case
ROLE_APP can't access /secure/main/* <- which is basically a controller that forward's the user to a base url depending on his group.


cheers!

nox

[Ben Alex]

A few threads (one of which links to the reference guide) might help:

http://forum.springframework.org/showthread.php?t=12902
http://forum.springframework.org/showthread.php?t=13230

Basically it depends on the concrete AccessDecisionManager you're using.

[nox]

it helped indeed!

ben, thanks! you rock!


cheers!

nox