hi, If you are intending on using MySQL and a JDBC Realm for access control, then the Tomcat-users.xml file is not used. I am wondering if in your role table you have two rows for user name admin? if not then this could be your problem as there has to be one row for each role a specific user name performs. - andy
±ç¬±³õ <[EMAIL PROTECTED]> wrote: My tomcat-users.xml > My tomcat-users.xml > <?xml version='1.0' encoding='utf-8'?> > <tomcat-users> > <role rolename="tomcat"/> > <role rolename="role1"/> > <role rolename="manager"/> > <role rolename="admin"/> > <user username="tomcat" password="tomcat" roles="tomcat"/> > <user username="role1" password="tomcat" roles="role1"/> > <user username="both" password="tomcat" roles="tomcat,role1"/> > <user username="admin" password="abc123" roles="admin,manager"/> > </tomcat-users> My server.xml driverName="com.mysql.jdbc.Driver" connectionURL="jdbc:mysql://localhost:3306/erp" connectionName="root" connectionPassword="abc123" digest="MD5" userTable="user_profile" userNameCol="usernm" userCredCol="passwd" userRoleTable="user_role" roleNameCol="role_name" /> I have inputted username and user role in tables. Still receive this message HTTP Status 403 - Access to the requested resource has been denied --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.