FilterSecurityInterceptor -> objectDefinitionSource

[lost.paradise]

Hi,

first of all, I'm from germany, so my english isn't the best

I have a Problem with the objectDefinitionSource in my filterSecurityInterceptor:

<bean id="filterInvocationInterceptor" class="net.sf.acegisecurity.intercept.web.FilterSe curityInterceptor">
<property name="authenticationManager">
<ref bean="authenticationManager"/></property>
<property name="accessDecisionManager">
<ref bean="accessDecisionManager"/></property>
<property name="objectDefinitionSource">
<value>
CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
PATTERN_TYPE_APACHE_ANT
/secure.jsp=ROLE_ADMIN,ROLE_TEST
</value>
</property>
</bean>

Now, I have 2 Users in my database:
user1 has the role ROLE_ADMIN and user2 ROLE_TEST

If I try to login with user1, access ist granted. Good! That's what I want. But if I login with user2, access is denied. Why? In the objectDefinitionSource, there I give both the access, ROLE_ADMIN and ROLE_TEST. If I modify the objectDefinitionSource to/in(?) /secure.jsp=ROLE_TEST,ROLE_ADMIN, then user2 has access and user1 is denied. Where is the problem?

thanks for ur help

[Ben Alex]

Try using AffirmativeBased as your AccessDecisionVoter.

[lost.paradise]

that's it !! Thank u very much