Thanks.
I googled for examples using secrity-constraint but with not much luck (just many 
people asking how to do it), and I've tried a few things but I'm not having much luck. 
something like:

<security-constraint>
        <web-resource-collection>          
                <web-resource-name>foo</web-resource-name>        
                <description>prevent access to jsp's under bar directory in foo 
webapp</description>   
                <url-pattern>/foo/bar/*.jsp</url-pattern>  
      </web-resource-collection>
</security-constraint>

can you help?

-----Original Message-----
From: Tim Funk [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 05, 2003 1:35 PM
To: Tomcat Users List
Subject: Re: Preventing access to a directory


To prevent directlory listings:
http://jakarta.apache.org/tomcat/faq/misc.html#listing

To prevent individual access to jsps, use web.xml and a security constraint.

-Tim

Tim Davidson wrote:
> Hi,
>       how can we prevent access to a set of JSP's inside a specific directory?
>       aparrently there is a directory tag for server.xml?
> thanks in advance.
>  


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to