You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "m.entwicklung" <m....@itara.de> on 2003/05/19 16:58:19 UTC
disabling trace method serverwide
is there a option to disable some HTTP methods severwide in a standalone
installation of tomcat?
any advice is welcome
kind regards
Burkard Endres
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: disabling trace method serverwide
Posted by Tim Funk <fu...@joedog.org>.
Try (and adapt) this (I haven't but would guess this would work)
<!-- See the dtd for where to put this and that I spelled it right -->
<security-constraint>
<web-resource-collection>
<web-resource-name>Get Stuff</web-resource-name>
<http-method>GET</http-method>
</web-resource-collection>
<web-resource-collection>
<web-resource-name>Post Stuff</web-resource-name>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>nobody</role-name>
</auth-constraint>
</security-constraint>
-Tim
m.entwicklung wrote:
> as i read this it is only possible to disable put and delete on a tomcat
> server or am i wrong?
>
>
> ----- Original Message -----
> From: "Tim Funk" <fu...@joedog.org>
> To: "Tomcat Users List" <to...@jakarta.apache.org>
> Sent: Monday, May 19, 2003 5:15 PM
> Subject: Re: disabling trace method serverwide
>
>
>
>>See security in web.xml (I think that should work)
>>
>>-Tim
>>
>>m.entwicklung wrote:
>>
>>>is there a option to disable some HTTP methods severwide in a standalone
>>>installation of tomcat?
>>>
>>>any advice is welcome
>>>
>>>kind regards
>>>
>>>Burkard Endres
>>>
>>
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: disabling trace method serverwide
Posted by "m.entwicklung" <m....@itara.de>.
as i read this it is only possible to disable put and delete on a tomcat
server or am i wrong?
----- Original Message -----
From: "Tim Funk" <fu...@joedog.org>
To: "Tomcat Users List" <to...@jakarta.apache.org>
Sent: Monday, May 19, 2003 5:15 PM
Subject: Re: disabling trace method serverwide
> See security in web.xml (I think that should work)
>
> -Tim
>
> m.entwicklung wrote:
> > is there a option to disable some HTTP methods severwide in a standalone
> > installation of tomcat?
> >
> > any advice is welcome
> >
> > kind regards
> >
> > Burkard Endres
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: disabling trace method serverwide
Posted by Tim Funk <fu...@joedog.org>.
See security in web.xml (I think that should work)
-Tim
m.entwicklung wrote:
> is there a option to disable some HTTP methods severwide in a standalone
> installation of tomcat?
>
> any advice is welcome
>
> kind regards
>
> Burkard Endres
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org