Enthuware

Posted: **Sat Nov 03, 2012 1:55 pm**

Second choice

@ServletSecurity(@HttpConstraint(EmptyRoleSemantic.DENY), rolesAllowed = "R1")

is syntactycally incorrect, and not because of EmptyRoleSemantic.DENY cannot be used when rolesAllowed is not empty as stated now in explanation. I can only assume it meant to be

Code: Select all

@ServletSecurity(@HttpConstraint(value = EmptyRoleSemantic.DENY, rolesAllowed = "R1"))

(note, that rolesAllowed attribute belongs to HttpConstraint, not to ServletSecurity), then the explanation fits.

Posted: **Sun Nov 04, 2012 9:33 am**

You are right. This has now been updated.

thank you for your feedback!

Posted: **Mon Nov 05, 2012 1:43 am**

It is still incorrect, because:

It is permissible to omit the element name and equals sign (=) in a single-element annotation whose element name is value, as shown below:

(from http://docs.oracle.com/javase/1.5.0/doc ... tions.html).

So in this case you must use

Code: Select all

value =

element:

Code: Select all

@ServletSecurity(@HttpConstraint(value = EmptyRoleSemantic.DENY, rolesAllowed = "R1"))

.

Posted: **Mon Nov 05, 2012 6:55 am**

Fixed.

thank you for your feedback!

Enthuware

About Question enthuware.jwpv6.2.666 :

About Question enthuware.jwpv6.2.666 :

Re: About Question enthuware.jwpv6.2.666 :

Re: About Question enthuware.jwpv6.2.666 :

Re: About Question enthuware.jwpv6.2.666 :