You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@tomcat.apache.org by "apuerta.foros" <ap...@renr.es> on 2005/02/01 20:22:45 UTC

Deny access to a JSP page

 Hi all.

 I'd like Tomcat to deny access to some JSPs with internal information.

 I can configure Apache to deny access depending on the user IP,
transparently.
 
 I'd like to do the same in Tomcat, but i don't now how.

 Any idea? Thanks.




---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Deny access to a JSP page

Posted by "apuerta.foros" <ap...@renr.es>.

 Thanks, my Tomcat version is 5.0.28.

 I think you are suggesting the use of 
"Remote Address Filter", but i can only use it with a Engine, a Host or
a Context, not for a individual JSP.
 I find ipflt.jar but i will probe first mod_rewrite.

 Thanks again.

El mar, 01-02-2005 a las 18:19 -0600, QM escribió:
> On Tue, Feb 01, 2005 at 08:22:45PM +0100, apuerta.foros wrote:
> :  I'd like Tomcat to deny access to some JSPs with internal information.
> : 
> :  I can configure Apache to deny access depending on the user IP,
> : transparently.
> :  
> :  I'd like to do the same in Tomcat, but i don't now how.
> 
> Have you searched the archives on this?  Look up "AccessValve." (-or was
> that "RemoteAccessValve?"  Either way, it's a Valve implementation.)
> 
> That, or look into servlet filters.  They're available with the 2.3 spec
> onward.
> 
> Finally, it's helpful to the rest of us when you post your setup details
> (Tomcat version, OS, etc).  There are several versions of Tomcat.
> 
> -QM
> 
> 
-- 


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Deny access to a JSP page

Posted by QM <qm...@brandxdev.net>.

On Tue, Feb 01, 2005 at 08:22:45PM +0100, apuerta.foros wrote:
:  I'd like Tomcat to deny access to some JSPs with internal information.
: 
:  I can configure Apache to deny access depending on the user IP,
: transparently.
:  
:  I'd like to do the same in Tomcat, but i don't now how.

Have you searched the archives on this?  Look up "AccessValve." (-or was
that "RemoteAccessValve?"  Either way, it's a Valve implementation.)

That, or look into servlet filters.  They're available with the 2.3 spec
onward.

Finally, it's helpful to the rest of us when you post your setup details
(Tomcat version, OS, etc).  There are several versions of Tomcat.

-QM


-- 

software  -- http://www.brandxdev.net
tech news -- http://www.RoarNetworX.com


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org