Hi, Doing this via file structure is kind of ugly. Consider at least these two alternatives: - Declarative security constraints in web.xml (see the Servlet Spec for your options there), - A filter mapped to /* that checks that the user has logged in, and if not directs the user to the index page.
Yoav Shapira Millennium Research Informatics >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >Sent: Wednesday, May 12, 2004 1:37 PM >To: [EMAIL PROTECTED] >Subject: Hiding app files in Tomcat 4.0.3 > >I'm running Tomcat 4.0.3 on a Windows 2000 platform. I am attempting to >configure my application so that the index.jsp file is always available >(the login screen), but the others are only available after the user has >logged in. I've tried many things in the .xml files, and have done a lot >of research on the Internet, but nothing seems to work. Any ideas? Thanks. > >BTW - the file structure of the app is as follows: > >application > application\index.jsp > application\src > application\src\jsps > application\src\jsps\*.jsp >... > >--Tim Sabin This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]