Return-Path: 
 <tomcat-user-return-86379-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 1607 invoked from network); 10 Dec 2003 23:45:07 -0000
Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12)
  by minotaur-2.apache.org with SMTP; 10 Dec 2003 23:45:07 -0000
Received: (qmail 25958 invoked by uid 500); 10 Dec 2003 23:44:33 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 25885 invoked by uid 500); 10 Dec 2003 23:44:33 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 25871 invoked from network); 10 Dec 2003 23:44:32 -0000
Received: from unknown (HELO stmk.gv.at) (192.26.237.11)
  by daedalus.apache.org with SMTP; 10 Dec 2003 23:44:32 -0000
Received: by janus.stmk.gv.at id <332163>; Thu, 11 Dec 2003 00:43:48 +0100
Subject: AW: GlobalNamingResources
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 11 Dec 2003 00:44:36 +0100
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.6375.0
Message-Id: <03Dec11.004348cet.332163@janus.stmk.gv.at>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: GlobalNamingResources
Thread-Index: AcO/cSJqHvfLrML/R4GCBdXpHmyTkgABWFGA
From: "Pfingstl Gernot" <gernot.pfingstl@stmk.gv.at>
To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

>=09
>	Pfingstl Gernot wrote:
>	> If I define a resource in <GlobalNamingResources> (in server.xml) I
>	> can use this resource in my web-application only if I use
>	> <ResourceLink> in my context. So it seems to me it isn't possible to
>	> use a resource defined in <GlobalNamingResources> unless I permit =
the
>	> use with a <ResourceLink> in the context or the engine.
>	>=20
>	> Is this right??
>=09
>	Indeed. You can add the ResourceLink in a DefaultContext with 5.0, for =

>	convinience, if, for example, you want to allow it in a whole virtual=20
>	host. I don't remember if I ported the feature and if it's also in =
4.1.29.
>=09
>	> Is this behaviour specified somewhere or is it subject to change?
>=09
>	No, it's not subject to a change. I think it's implied: nowhere it is=20
>	written that global resources define stuff in the webapp naming =
contexts.
In =
http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/globalresources.ht=
ml
there's the paragraph:
	<GlobalNamingResources ...>
	  ...
	  <Environment name=3D"maxExemptions" value=3D"10"
	         type=3D"java.lang.Integer" override=3D"false"/>
	  ...
	</GlobalNamingResources>
	This is equivalent to the inclusion of the following element in the web =
application deployment descriptor (/WEB-INF/web.xml):
=09
	<env-entry>
	  <env-entry-name>maxExemptions</param-name>
	  <env-entry-value>10</env-entry-value>=09
	  <env-entry-type>java.lang.Integer</env-entry-type>
	</env-entry>

The sentence above "...is equivalent..." can be interpreted in the way, =
that there no ResourceLink is needed.

>=09
>	> This behavoiur is important to me, becaue I will explicitely permit
>	> (or deny) the access to a global resource per context. Its a =
security
>	> problem.
>=09
>	That's the reason behind the ResourceLink.
>

Thank you for your answer,
Gernot

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org