Pardon my JAAS newbie-ness. I tried looking elsewhere for help but here goes:
1) Is it possible to use query strings in the <url-pattern> element of web.xml? If I have a servlet named 'orders' and a query string of 'cmd=add' or 'cmd=delete', can I declare a <security-constraint> with a <url-pattern> of 'orders?cmd=add'? I tried and it doesn't seem to work. I don't know if it's because it's not allowed or if I'm doing something wrong.
2) I saw in the Tomcat/Catalina lists concerning the problem with declaring an <error-page> for a 403 response code. Over there, they say it's been fixed for 4.0.1 JDBCRealms but I'm using the JBoss/Catalina bundle with 4.0.1 and it appears to be still broken. Anybody using it with acceptable results?
Thank you very much in advance for your help.
