Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (herse.apache.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: WebdavServlet
Date: Sun, 1 Jul 2007 12:07:35 -0500
Message-ID: 
 <AEF3D568DD1D9E428048C592AA164597060462EB@USRV-EXCH4.na.uis.unisys.com>
In-Reply-To: <d46327c70706300858y3e7b024bj8dd8147eb9fcde90@mail.gmail.com>
Thread-Topic: WebdavServlet
Thread-Index: Ace7L5bR3F9bhbK4SG2Uz4kzTqIWewAz616g
References: <d46327c70706292243g30d6c1b3s908750a6c71147bd@mail.gmail.com>
 <46862EFA.1090309@apache.org>
 <d46327c70706300858y3e7b024bj8dd8147eb9fcde90@mail.gmail.com>
From: "Caldarale, Charles R" <Chuck.Caldarale@unisys.com>
To: "Tomcat Users List" <users@tomcat.apache.org>

> From: Robert J. Carr [mailto:rjcarr@gmail.com]=20
> Subject: Re: WebdavServlet
>=20
> > Mapping it to /edit/* allows the content to be exposed at an
> > alternative url.
>=20
> Sure, but the content exposed would still be the "whole of=20
> the webapp", right?

Yes - allowing appropriately privileged users access.

> > The idea is that normal users access /your-app/*, a
> > system admin can edit contant via /your-app/edit/*.
>=20
> Not following what a system admin has to do with anything.

Substitute "privileged user" for "system admin", and control who is
privileged via <security-constraint> elements in your web.xml file.
Constraints can be placed on sub-paths of "edit", as well as "edit"
itself, to segregate just who has webdav access to what portions of the
webapp.

> The 'edit' folder would just be implied ... both "normal users"
> and "system admin" would still be exposed to the whole of the
> webapp, right?

Correct, but only those allowed to use the "edit" path could run the
webdav servlet.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org