I've put a gzipped file at http://www.healthnet-sl.es/JServSecManager.tar.gz containing the Security Manager stuff that I've mentioned. The tarball has a README, a sample configuration stuff, and the classes (including a context diff with JServ.java as of release 1.1.1b1. It is really simple but useful, and I've been using it at production sites (with JServ 1.1) without problems. You may want to look at it, and if it is found of interest it could be integrated into the CVS. If you have any comments or questions regarding the design decisions or any other aspect please send it to [EMAIL PROTECTED] or to this list (I fear that I did not put too much documentation). Though this system could be largely improved, I do not plan any further work with these security modifications, as I'm going to concentrate my (few) available opensource time-resources on Tomcat and other open source projects. Hope it's useful. Carlos -- ---------------------------------------------------------- To subscribe: [EMAIL PROTECTED] To unsubscribe: [EMAIL PROTECTED] Archives and Other: <http://java.apache.org/main/mail.html> Problems?: [EMAIL PROTECTED]