portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Raphaël Luta <raphael.l...@networks.groupvu.com>
Subject Re: Servlet 2.2 Spec. and serving files from the WEB-INF directory
Date Wed, 07 Mar 2001 20:52:26 GMT
Jon Stevens wrote:
> 
> on 3/7/01 12:19 PM, "Raphaël Luta" <raphael.luta@networks.groupvu.com>
> wrote:
> 
> > I put the templates in the WEB-INF directory because for systems such as
> > Velocity, they should never be accessed directly from a client so WEB-INF
> > was a natural solution.
> 
> correct. or you can protect the directory with ACL's.
> 
> <http://scarab.tigris.org/source/browse/scarab/src/conf/web.xml?rev=1.2&cont
> ent-type=text/x-cvsweb-markup>
> 
>     <security-constraint>
>         <web-resource-collection>
>             <web-resource-name>templates</web-resource-name>
>             <url-pattern>/templates/*</url-pattern>
>         </web-resource-collection>
>         <web-resource-collection>
>             <web-resource-name>logs</web-resource-name>
>             <url-pattern>/logs/*</url-pattern>
>         </web-resource-collection>
>         <auth-constraint>
>             <role-name>admin</role-name>
>         </auth-constraint>
>     </security-constraint>
> 
> That way, it is still easier for people to find the directory where the
> templates are stored.
> 

Yes, but then you need a configured container level authentication realm...

What about dropping JSP ? 

;-P (relax ingo, it's a joke...)

--
Raphaël Luta - raphael.luta@networks.groupvu.com
Vivendi Universal Networks - Services Manager / Paris

Mime
View raw message