Go to Tomcat Home/conf/web.xml file. in this file put listings as false. <init-param> <param-name>listings</param-name> <param-value>false</param-value> </init-param>
Regards, --------------------------------------------------------- Girish Naik Mobile:-+91-09740091638 girish.n...@gmail.com Rodney Dangerfield<http://www.brainyquote.com/quotes/authors/r/rodney_dangerfield.html> - "What a dog I got, his favorite bone is in my arm." On Thu, Jun 18, 2009 at 7:11 PM, Greg Lindholm <greg.lindh...@gmail.com>wrote: > We put all our jsp file into a /struts/ folder then add the following > security contraint to web.xml > > > <security-constraint> > <display-name>Prevent access to raw pages.</display-name> > <web-resource-collection> > <web-resource-name>Raw Pages</web-resource-name> > <url-pattern>/struts/*</url-pattern> > </web-resource-collection> > <auth-constraint> > <description>No roles, so no direct access</description> > </auth-constraint> > </security-constraint> > > > On Thu, Jun 18, 2009 at 9:32 AM, abhishek reddy <abhishek.c1...@gmail.com > >wrote: > > > how to prevent users from directly accessing jsp files, rather they have > to > > come thru sturts action? > > > > -- > > Abhishek > > >