You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by Nouguier Olivier <ol...@wanadoo.fr> on 2003/02/01 00:58:08 UTC

About the need for a read access of HomesUserDatabase.java

hi all,

	I don't agree ( or don't understand ... ) with the read right check for
user home directory instead of user webapp directory when tomcat4 try to
deploy a user webapp.

Example:
 I'm the user legolas.
 My home is /home/legolas
 My webapp is in /home/legolas/public_html

With tomcat4.1.18, /home/legolas has to been readable for tomcat (
drwxr-xr-x ), but in fact it should be only executable ( drwrr-w--x ).

Changing the read access check to /home/legolas/public_html make it work
without the need for tomcat4 to be able to read the user homedir.

 
That the senses of this patch

PS: Sorry for the english ( fr/fr )