I am currently testing a set of portlets I have developed for our company portal (JBoss Portal 2.4). Security is a very important and part of the tests are sending portlet requests as user, who has no access to these particular portlets. Todo so so I am using the Live Http Replay Tool in Firefox. I will "record" requests done as a user, who can access aparticlar portlet and then "replay" the requests when logged in as a user, who does not have access to the portlet. When replaying a get request HTTP Status 401 is returned. However when replaying a post request the request is redirecteted to https://localhost:8443/portal/authsec/.... Is there a way to configure the portal to send HTTP Statuts 401 instead of redirecting the request?

Thanks,

Anette