RE: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-19 Thread Sharon Prober (sprober)
List Subject: Protect JSP from Direct Access in Tomcat 7.0.xx Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. I have this mapping in web xml and this is not working,It seems that probably i need to define a role first

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-19 Thread Kiran Badi
Badi [mailto:ki...@poonam.org] Sent: Tuesday, June 19, 2012 3:10 AM To: Tomcat Users List Subject: Protect JSP from Direct Access in Tomcat 7.0.xx Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. I have this mapping in web xml

Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Kiran Badi
Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. I have this mapping in web xml and this is not working,It seems that probably i need to define a role first and then use below settings.But unfortunately my app is open

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Tim Watts
Hi Kiran, On Tue, 2012-06-19 at 05:40 +0530, Kiran Badi wrote: Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. By direct access do you mean that http://host/myapp/sample.jsp is returning the JSP source code rather than

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Kiran Badi
On 6/19/2012 8:03 AM, Tim Watts wrote: Hi Kiran, On Tue, 2012-06-19 at 05:40 +0530, Kiran Badi wrote: Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. By direct access do you mean that http://host/myapp/sample.jsp is

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Tim Watts
On Tue, 2012-06-19 at 08:48 +0530, Kiran Badi wrote: No its not returning source code.I have couple of jsps where in I use EL in those to access session objects and directly accessing those jsps is not something I want. Good move. SNIP 2. Is their any extra setting that is required if I

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Kiran Badi
On 6/19/2012 10:22 AM, Tim Watts wrote: Hopefully, you're trying to use or move toward the MVC (Model, View, Controller) pattern. If not, you should. Google MVC design pattern. There are many, many frameworks that will make this easier for you (once you learn them): Struts, Spring MVC... If