From 533c2d97f7137d6ea50e5e1794936736f24f558d Mon Sep 17 00:00:00 2001
From: Roland Haeder <roland@mxchange.org>
Date: Thu, 7 Apr 2016 14:21:09 +0200
Subject: [PATCH] added glassfish-specific role-group mapping and fixed URL
 pattern in web.xml

---
 web/WEB-INF/glassfish-web.xml |  4 ++++
 web/WEB-INF/web.xml           | 30 +++++-------------------------
 2 files changed, 9 insertions(+), 25 deletions(-)

diff --git a/web/WEB-INF/glassfish-web.xml b/web/WEB-INF/glassfish-web.xml
index 15d7a0a5..f1501e22 100644
--- a/web/WEB-INF/glassfish-web.xml
+++ b/web/WEB-INF/glassfish-web.xml
@@ -3,6 +3,10 @@
 <glassfish-web-app error-url="">
 	<context-root>/jjobs-war</context-root>
 	<class-loader delegate="true"/>
+	<security-role-mapping>
+		<role-name>admin</role-name>
+		<group-name>admin</group-name>
+	</security-role-mapping>
 	<jsp-config>
 		<property name="keepgenerated" value="true">
 			<description>Keep a copy of the generated servlet class' java code.</description>
diff --git a/web/WEB-INF/web.xml b/web/WEB-INF/web.xml
index e95cc0a5..0961676c 100644
--- a/web/WEB-INF/web.xml
+++ b/web/WEB-INF/web.xml
@@ -26,46 +26,26 @@
     <welcome-file-list>
         <welcome-file>faces/index.xhtml</welcome-file>
     </welcome-file-list>
-    <security-constraint>
-        <display-name>LoginConstraint</display-name>
-        <web-resource-collection>
-            <web-resource-name>loginArea</web-resource-name>
-            <description>Login area</description>
-            <url-pattern>/llogin/*</url-pattern>
-        </web-resource-collection>
-        <auth-constraint>
-            <description>User Authentication</description>
-            <role-name>user</role-name>
-        </auth-constraint>
-    </security-constraint>
     <security-constraint>
         <display-name>AdminConstraint</display-name>
         <web-resource-collection>
             <web-resource-name>admin</web-resource-name>
             <description>Administrative area</description>
-            <url-pattern>/admin/*</url-pattern>
+            <url-pattern>/faces/admin/*</url-pattern>
         </web-resource-collection>
         <auth-constraint>
             <description>Admin authentication</description>
             <role-name>admin</role-name>
         </auth-constraint>
     </security-constraint>
-    <login-config>
-        <auth-method>FORM</auth-method>
-        <realm-name>Loginbereich / Login area</realm-name>
-        <form-login-config>
-            <form-login-page>/user/login.xhtml</form-login-page>
-            <form-error-page>/user/login_error.xhtml</form-error-page>
-        </form-login-config>
-    </login-config>
-    <security-role>
-        <description>A logged-in user that has previously registered himself/herself.</description>
-        <role-name>user</role-name>
-    </security-role>
     <mime-mapping>
         <extension>tpl</extension>
         <mime-type>text/plain</mime-type>
     </mime-mapping>
+    <login-config>
+        <auth-method>BASIC</auth-method>
+        <realm-name>file</realm-name>
+    </login-config>
     <security-role>
         <description>Administrativre rule</description>
         <role-name>admin</role-name>
-- 
2.39.5