Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (herse.apache.org: local policy)
Message-ID: <4543AB14.7000809@best.com>
Date: Sat, 28 Oct 2006 12:10:12 -0700
From: Maurice Yarrow <yarrow@best.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4.1) Gecko/20031114
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Tomcat Security
References: 
 <AEF3D568DD1D9E428048C592AA1645970507295A@USRV-EXCH4.na.uis.unisys.com>
 <45427D79.2060504@christopherschultz.net> <45429DA0.2060601@best.com>
 <45434E9E.7070807@christopherschultz.net>
In-Reply-To: <45434E9E.7070807@christopherschultz.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Chris

Yes, thank you for clarifying you question:

The answer is the latter:  authentication required.
In fact, there are three levels of privacy on these images and documents:
    public:              (everyone can view)
    passworded:  (password required for viewing: say, your
                              family only.  This pw specific to these views)
    private:             (only you, the owner, have access - so only your
                              login permits you to see these views)

Presumably, most views are public, but this has to be the owner's 
decision, no ?

Maurice Yarrow

Christopher Schultz wrote:

>>Silly question for Maurice: why are you trying to protect your images?
>>Do you want to stop people from ripping them off from your site?
>>
>>It's not my call, but the customer's.
>>    
>>
>
>You still didn't answer the question: what is the goal, here? Do you
>want to "prevent" linking to your images from other pages? Prevent
>people requesting the images directly? How about "nobody gets an image
>unless they are authenticated?"
>
>-chris
>
>
>  
>


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org