Mighty Tornado wrote: > Tomcat 6Struts 1.3 > OS: MacOS X - Leopard > > Hi, > > I am trying to make sure my app requires a login. So I configured the > <url-pattern>*.do</url-pattern> <url-pattern>/*</url-pattern> will protect everything.
> <http-method>POST</http-method> This only protects the POST method. GETs will not be restricted. I'd remove this line. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org