Hello Alex,
Alessandro Vernet wrote
You can restrict which app/form people can edit with the file config/form-runner-roles.xml. So you could say that users with the role 'hr' can only edit forms in the 'hr' application. Did you change this file by any chance?
No, I didn't touch the "config/form-runner-roles.xml". I found out that it happens when I set
<property as="xs:string" name="oxf.fr.authentication.method"> value="header"/> to "container" in the "properties-form-runner.xml" file.
The goal is to implement an authentication for the summary page. After the authenticaion only the forms related to the role show up (form-runner-roles.xml).
Here is what I tried:
- create the role on tomcat
- inserted the url-pattern "/fr/orbeon/builder/summary/" with the basic authentication method into web.xml
- change the authentication method in "properties-form-runner.xml" to "container"
When I try to login then I just see an empty summary list (also with <role name="*" app="*" form="*"/> in form-runner-roles.xml)
I don't think that I'm the first person who wants to do this. Did I do a configuration mistake or is my approach wrong?