JBOSS Security: web.xml vs. jboss-web.xml
- by sixtyfootersdude
What is the relation between web.xml and jboss-web.xml? Seems like:
Jboss-web.xml
specifies the security domain (which can be found in login-config.xml)
web.xml
specifies what the security level is
I don't understand what happens when jboss-web.xml specifies a weak security domain. Ie: one that cannot do what web.xml specifies. What happens then?