dev@jersey.java.net

Re: [Jersey] Jersey security annotations and tomcat container.

From: Paul Sandoz <Paul.Sandoz_at_Sun.COM>
Date: Thu, 18 Feb 2010 20:33:03 +0100

Hi James,

Add the RolesAllowedResourceFilterFactory to your web.xml:

https://jersey.dev.java.net/nonav/apidocs/latest/jersey/com/sun/jersey/api/container/filter/RolesAllowedResourceFilterFactory.html

Paul.

On Feb 18, 2010, at 7:31 PM, James Russo wrote:

> Hello,
>
> Forgive me if this isn't 100% jersey related. I'd like to be able
> to provide method (or class) level annotations to secure a Jersey
> based API using basic auth. Can someone point me in the right
> direction here? I see @PermitAll, @DenyAll, @PermitRoles annotations
> and would like to use these, but for the life of me I can't figure
> out how to get them enforced.
>
> Right now, I have everything secured via web.xml, but want to push
> it into the individual methods (and perhaps resource classes).
>
> I am using Tomcat 6.x, Jersey 1.1.5 and Jersey-Spring 1.01 & spring
> 2.5.6.SEC01.
>
> Thanks,
>
> -jr
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_jersey.dev.java.net
> For additional commands, e-mail: dev-help_at_jersey.dev.java.net
>