tomcat 中对资源进行权限控制

在TOMCAT中利用TOMCAT用户对资源进行权限控制

以下就是对/proxoolAdmin进行控制:只有manager权限的用户才能访问

 

<security-constraint>
		<web-resource-collection>
			<web-resource-name>proxool</web-resource-name>
			<url-pattern>/proxoolAdmin</url-pattern>
		</web-resource-collection>
		<auth-constraint>
			<role-name>manager</role-name>
		</auth-constraint>
	</security-constraint>
	<login-config>
		<auth-method>BASIC</auth-method>
		<realm-name>proxool manager Application</realm-name>
	</login-config>
	<security-role>
		<description>The role that is required to log in to the Manager
			Application</description>
		<role-name>manager</role-name>
	</security-role>