"mkumar79" wrote:
I got the form authentication but I am having trouble with authorization.
in my login-config.xml I have specified UsersRolesLoginModule..

login-config.xml

<application-policy name="Security">
<authentication>
<login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule" flag="required" />
</authentication>
</application-policy>


web.xml
<welcome-file-list>
<welcome-file>index.jsp</welcome-file>
</welcome-file-list>

<security-constraint>
<web-resource-collection>
<web-resource-name>Security Application</web-resource-name>
<url-pattern>*.jsp</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>supervisor</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/error.jsp</form-error-page>
</form-login-config>
</login-config>


jboss-web.xml

<jboss-web>
<context-root>Security</context-root>
<security-domain>java:/jaas/Security</security-domain>
</jboss-web>


When I bring up the application, it goes to login.jsp, as expected. If I authenticate fine, it just comes back to login page. If I put in incorrect username and password, it goes to error page.
Since the welcome file is index.jsp, what do I need to do for it to go to welcome file upon a successful authentication?

thanks,