Hi,
I am trying to restrict access to several dirs in my web app archive (/images, /css ...) but if I use in web.xml :
....
<security-constraint>
<web-resource-collection>
<url-pattern>/images/*</url-pattern>
<url-pattern>/css/*</url-pattern>
<url-pattern>/js/*</url-pattern>
<url-pattern>/ihtml/*</url-pattern>
<http-method>GET</http-method>
<http-method>HEAD</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>cm-manager</role-name>
</auth-constraint>
</security-constraint>
....
the restriction is OK, user can not list the dirs through explorer, but also server cant go to that dirs for resources (I dont see my pictures, style sheets...).
Can anyone help how to manaage that resources are available for server?
Thanks a lot.
Petr
