...
| Code Block |
|---|
<security-constraint>
<web-resource-collection>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
<role-name>SecurityLevel.info</role-name>
<role-name>SecurityLevel.all</role-name>
</auth-constraint>
</security-constraint>
|
| Code Block |
|---|
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>myRealm</realm-name>
</login-config>
|
SecurityLevel.info and SecurityLevel.all are predefined roles for JobScheduler.
SecurityLevel.info allows only rights for watching but not for starting jobs, while SecurityLevel.all allows additionally the right for starting jobs.
IP authorization
To restrict the access for specific hosts you have to define an IPAccessHandler in your jetty.xml:
...