1 Reply Latest reply on Jan 30, 2003 2:43 PM by Nuno Maia

    restricting access to web app resources

    Petr Heèko Newbie

      Hi,

      I am trying to restrict access to several dirs in my web app archive (/images, /css ...) but if I use in web.xml :

      ....
      <security-constraint>
      <web-resource-collection>
      <url-pattern>/images/*</url-pattern>
      <url-pattern>/css/*</url-pattern>
      <url-pattern>/js/*</url-pattern>
      <url-pattern>/ihtml/*</url-pattern>
      <http-method>GET</http-method>
      <http-method>HEAD</http-method>
      </web-resource-collection>
      <auth-constraint>
      <role-name>cm-manager</role-name>
      </auth-constraint>
      </security-constraint>
      ....

      the restriction is OK, user can not list the dirs through explorer, but also server cant go to that dirs for resources (I dont see my pictures, style sheets...).
      Can anyone help how to manaage that resources are available for server?

      Thanks a lot.

      Petr