BASIC jaas login on page other than start page
I want to require a password on a page in my project other than the start page. I set up a simple security-constraint and am seeing a strange behavior. The login prompt gets displayed as expected when the page defined in the security-constraint is the project start page, but it seems to be ignored when I use the actual project start page and access the page I want to protect via a button. Has anyone seen this or does anyone have a fix?
The constraint is defined as follows:
<security-constraint>
<web-resource-collection>
<web-resource-name>Secure Pages</web-resource-name>
<url-pattern>/faces/editor/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>editors</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>file</realm-name>
</login-config>
