Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
From: =?UTF-8?Q?Andr=c3=a9_Warnier_=28tomcat=29?= <aw@ice-sa.com>
Subject: Re: Using WebDAV in Tomcat 7.0.45
To: users@tomcat.apache.org
References: <b3de9e08c3064959bcf117c9320ffa1c@SWEX4.resource.group.intl>
Message-ID: <5825A135.2000007@ice-sa.com>
Date: Fri, 11 Nov 2016 11:45:09 +0100
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:38.0) Gecko/20100101
 Thunderbird/38.5.0
MIME-Version: 1.0
In-Reply-To: <b3de9e08c3064959bcf117c9320ffa1c@SWEX4.resource.group.intl>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
archived-at: Fri, 11 Nov 2016 10:45:26 -0000

Hi.

On 11.11.2016 09:08, Arno Schfer wrote:
> Hi all,
>
> I have activated WebDAV in my web app to be able to show some log files directly in the browser and to edit some special XML files in a special editor..
> In my first attempt I can read all this files and show it in the editor and in the browser, but I failed to save them, after I have changed them.
>

I think that you are missing a piece of the puzzle. Let me try to explain in relatively 
simple terms :

The "DAV protocol" is an addition to the standard HTTP protocol.
What it does, is to enable some additional HTTP "command verbs", which are understood by 
additional "handlers" on the webserver side.
A standard webserver understands the HTTP command "GET" and "POST", and all browsers are 
capable to send these commands to the webserver.
But to upload a page or file from a HTTP client to a webserver, using DAV, the client has 
to be able to send this file to the webserver using a "PUT" command.
(That is your "HTTP save request" as you mention below).
This command is not supported by a standard browser. You need a special "DAV client" 
program for that.  As examples of such special DAV clients :
- many HTML editors have such a feature built-in (e.g. DreamWeaver)
- the Windows Explorer program includes such a feature (if you create a "Web Folder" in 
your "Network Locations")(see for example here : 
http://www.howtogeek.com/203432/how-to-access-ftp-and-webdav-sites-in-any-operating-systems-file-manager/)(or 
here : https://www.webdavsystem.com/server/access/windows/windows/)
- some commercial Windows add-on programs like WebDrive 
(https://southrivertech.com/products/webdrive/)

Of course, because with DAV, any DAV client can upload and/or overwrite files on the 
server, you must be careful of the permissions aspect.  On the server side, the DAV module 
runs within the webserver, thus under the user-id and with the permissions of that webserver.
So in order to be able to read and possibly write to some file, that file (and its 
directory) needs to be so that the webserver user-id has the permission to read/write it.
That is dangerous, and should be considered very carefully.


> Can someone provide me a good tutorial or a short example, what I have to do, to get it running. I am using the standard WebdavServlet from
> the catalina.jar and the WebdavFixFilter for now. From the documentation I do not understand, how I have to request the single methods of the
> implemented interfaces. Do I have to implement my own servlet or filter to handle all interfaces what I need for saving files? Also an example of
> a possible HTTP save requests would be very helpfull.
>
> Thanks in advance,
> best regards
> Arno
> _________________________________________________________
>
> Vorsitzender des Aufsichtsrats: David Bellin
> Vorstand: Diederik Vos (CEO) ? Ralph Gillessen (COO) ? Ren Gawron (CFO)
> Martin Hodgson (Executive Director Management Consulting)
> SQS AG ? Stollwerckstrae 11 ? 51149 Kln
> Sitz der Gesellschaft: Kln ? Amtsgericht Kln, HRB 12764
>
> This e-mail may contain confidential and/or privileged information. If you are not the intended recipient
> (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail.
> Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden.
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org