Posted by xweg on Sep 11, 2009; 8:06am
URL: https://discuss.orbeon.com/Can-t-create-a-new-form-in-form-builder-tp45165p45167.html

Hello Alex,

Alessandro Vernet wrote

You can restrict which app/form people can edit with the file config/form-runner-roles.xml. So you could say that users with the role 'hr' can only edit forms in the 'hr' application. Did you change this file by any chance?

No, I didn't touch the "config/form-runner-roles.xml". I found out that it happens when I set
<property as="xs:string"  name="oxf.fr.authentication.method"> value="header"/> to "container" in the "properties-form-runner.xml" file.

The goal is to implement an authentication for the summary page. After the authenticaion only the forms related to the role show up (form-runner-roles.xml).

Here is what I tried:
- create the role on tomcat
- inserted the url-pattern "/fr/orbeon/builder/summary/" with the basic authentication method into web.xml
- change the authentication method in "properties-form-runner.xml" to "container"

When I try to login then I just see an empty summary list (also with <role name="*" app="*" form="*"/> in form-runner-roles.xml)

I don't think that I'm the first person who wants to do this. Did I do a configuration mistake or is my approach wrong?