Re: Different security constraints for different ip addresses

2007-04-21 Thread Mark Thomas
Omar Eljumaily wrote: > I want to be able to give non login authorization for a local subnet, > but force everybody else to login to a site. > > Can I do this with combinations of ip-constraint and auth-constraint in > web.xml? No, since the servlet spec does not define a constraint based on ip-a

Different security constraints for different ip addresses

2007-04-21 Thread Omar Eljumaily
I want to be able to give non login authorization for a local subnet, but force everybody else to login to a site. Can I do this with combinations of ip-constraint and auth-constraint in web.xml? Something like the following would give access to a private subnet. Could I give access to every