Remove authentication from web_resources folder

I want to allow anonymous access to files under web_resources rather than being redirected to the login page.  I thought adding the line

/web_resources/*

to the system-security-conf.xml file would do it but this brings up an error page, instead of the login page, saying

User ‘null’ is not authorized to perform the requested action(s).

Ideas anyone?

Cheers, Andrew

Hi Andrew

Could you try the same config in Rhythmyx\AppServer\server\rx\deploy\rxapp.ear\rxapp.war\WEB-INF\config\user\security\user-security-conf.xml file?

Hi Mythili,

No joy - it just comes back with the same error as above…

A

Hi Andrew

It should work since I can able to access with suggested config in place.  Try clearing browser cache and also restart the server if you haven’t.  We can also try explicitly specifying the file that you are trying to access like:

/web_resources/spacer.gif

Hi Mythili,

I’m not having any luck.  We have URLrewrite configured on the server so that when you go to http://server:port/web_resources it redirects to http://server:port/Rhythmyx/web_resources but even after removing that I can't use a wildcard and just get the same null user error.

I haven’t tried a single file since that’s of no use anyway…

Cheers, Andrew

Hi Andrew

Following is config details from local Rhythmyx\AppServer\server\rx\deploy\rxapp.ear\rxapp.war\WEB-INF\config\user\security\user-security-conf.xml file.  Please note that though we configure anonymous, we still need to authenticate to access the files but we should not be getting the
User ‘null’ is not authorized to perform the requested action(s). message.

<?xml version="1.0" encoding="UTF-8"?>


/web_resources/*