Re: Restrict access to Velocity's capabilities

2005-02-07 Thread Mike Kienenberger
Ben [EMAIL PROTECTED] wrote: Hi I have been using Velocity throughout my site and I am in awe with its capabilities. However there are situations where I need to restrict its capabilities to a certain extend. For example, my site allows users to upload templates and be able to use a

Re: Restrict access to Velocity's capabilities

2005-01-23 Thread Will Glass-Husain
Hi Ben, Restricting access is a tricky issue. We have a publically available system in which hundreds of users upload templates. I've written a few thoughts on how to have a secure server environment here: http://wiki.apache.org/jakarta-velocity/BuildingSecureWebApplications Abusing the