tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sarma <ssa...@mahindrabt.com>
Subject in tomca 5 .0.* my security constraint is not working why
Date Sun, 25 Jun 2006 16:36:06 GMT

hi 
even i put jsp page in protected folder i am able to access them directly in 
tomcat 5.0. 

i am able to access these resticted pages directly
http://localhost:8080/protected/*.jsp
what i have to do to restrict this 

this is my web.xml page

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
	<display-name>ChartCreatorWebApp</display-name>

 	<security-constraint>
       <web-resources-collection>
          <web-resources-name>protected</web-resources-name>
          <url-pattern>/protected/*.jsp</url-pattern>
      </web-resources-collection>   
      
   </security-constraint>
    <welcome-file-list>
     <welcome-file>first.jsp</welcome-file>
    </welcome-file-list>
  <resource-ref>
    <description>Oracle Datasource example</description>
    <res-ref-name>jdbc/myoracle</res-ref-name>
    <res-type>javax.sql.DataSource</res-type>
    <res-auth>Container</res-auth>
  </resource-ref>
</web-app>

do tell to put folder in web-inf folder
--
View this message in context: http://www.nabble.com/in-tomca-5-.0.*-my-security-constraint-is-not-working-why-t1844865.html#a5035656
Sent from the Tomcat - User forum at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message