users@glassfish.java.net

Re: realm security with the hello world duke program...

From: <glassfish_at_javadesktop.org>
Date: Mon, 19 May 2008 12:49:19 PDT

the other thread you linked; fixed a configuration problem, and then I presume he was able to get his installation working properly. The web container performs its permission checks, including those that tell it when to prompt the user for authentication, by checking with the java policy subsystem. If you have your environment set up such that there is an unqualified grant of AllPermission defined in one of the relevant policy files, then you will never get prompted for authentication (because in effect, it is never needed). You can read more about this in

http://blogs.sun.com/monzillo/entry/policy_files_the_securitymanager_and

ron
[Message sent by forum member 'monzillo' (monzillo)]

http://forums.java.net/jive/thread.jspa?messageID=275307