You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by te...@aero.bombardier.com on 2010/11/30 18:18:55 UTC

allow user to start / stop webapps but not to deploy


Hi there

We are running Tomcat 6.0.29 on a Windows server.
I would like a specific user to be able to stop and start their own webapp.
But I dont want them to be able to deploy themselves and this has to go
through a tight change process.

Doe anyone have any ideas how to do this.
It is my understanding that when using Tomcat Manager, if I give them the
manager role they will be able to do both.

Any advice is greatly appreciated


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: allow user to start / stop webapps but not to deploy

Posted by Konstantin Kolinko <kn...@gmail.com>.
2010/11/30  <te...@aero.bombardier.com>:
> We are running Tomcat 6.0.29 on a Windows server.
> I would like a specific user to be able to stop and start their own webapp.
> But I dont want them to be able to deploy themselves and this has to go
> through a tight change process.
>
> Doe anyone have any ideas how to do this.
> It is my understanding that when using Tomcat Manager, if I give them the
> manager role they will be able to do both.
>
> Any advice is greatly appreciated
>

You can configure your own roles in web.xml to provide access to
certain /foo or /html/foo URLs only.

See
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/webapps/manager/WEB-INF/web.xml?view=markup

for how the roles will be configured in the next tc6.0.x version.


Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: allow user to start / stop webapps but not to deploy

Posted by Pid <pi...@pidster.com>.
On 11/30/10 9:22 PM, Christopher Schultz wrote:
> Pid,
> 
> On 11/30/2010 1:12 PM, Pid * wrote:
>> You could provide a custom API which interacts with JMX to do this.
> 
> I thought more nuanced roles had recently been added to the manager app,
> but I can't find any configuration file comments to confirm that. Maybe
> it's in the works. Maybe I'm crazy.

See the error page copy.

I don't think there's a split between stop, start & undeploy.


p

Re: allow user to start / stop webapps but not to deploy

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Pid,

On 11/30/2010 1:12 PM, Pid * wrote:
> You could provide a custom API which interacts with JMX to do this.

I thought more nuanced roles had recently been added to the manager app,
but I can't find any configuration file comments to confirm that. Maybe
it's in the works. Maybe I'm crazy.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkz1axQACgkQ9CaO5/Lv0PDkdACgv9IkKRPV1+COyzP0td9/C+x9
RFkAmQGME7Fj6+A3V20vhZOFL++72Biu
=SDkU
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: allow user to start / stop webapps but not to deploy

Posted by Pid * <pi...@pidster.com>.
You could provide a custom API which interacts with JMX to do this.


p

On 30 Nov 2010, at 17:19, "terry.mcbride@aero.bombardier.com"
<te...@aero.bombardier.com> wrote:

>
>
> Hi there
>
> We are running Tomcat 6.0.29 on a Windows server.
> I would like a specific user to be able to stop and start their own webapp.
> But I dont want them to be able to deploy themselves and this has to go
> through a tight change process.
>
> Doe anyone have any ideas how to do this.
> It is my understanding that when using Tomcat Manager, if I give them the
> manager role they will be able to do both.
>
> Any advice is greatly appreciated
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org