But I think we still can do it in the filter, such as:

doFilter() {
              if (URLHasWsdlSuffix()) {
                //Do the Authentication
              } else {
//access the web service }
}

If you don't want to use the filter to do the security, maybe need to add an interceptor or other codes before dealing with WSDLQueryHandler, as willem pointed out in the other mail.

HTH..

Thanks
Jeff

Glen Mazza wrote:
Jeff,
I think he doesn't want people to see the WSDL file.  It's not the
service he wants to restrict, but viewing its WSDL.  I don't know if
that can be done.

Glen

Am Mittwoch, den 17.10.2007, 11:11 +0800 schrieb Jeff Yu:
Hi,

There is an easy way that I came up is to use a filter in web.xml to restrict the access.

Say there are three services: A,B,C , we want to restrict the B,C service. we can pulish the services as following:

http://host.com/services/secure/B
http://host.com/services/secure/C
http://host.com/services/A.

And then we will config a filter to restrict the http://lhost.com/service/secure url to do the authentication.

So people can access the A service without any restriction, but need to get authentication to access B,C service.

Thanks
Jeff


Egor Samarkhanov wrote:
Hello !

How can I restrict access to WSDL of my service?
I don't want someone to access the
http//host.com/services/myservice?wsdl content.
And I use Servlet transport.

Thanks,
Egor Samarkhanov ([EMAIL PROTECTED])




Reply via email to