Forcing a session lastaccessedtime update

2008-01-31 Thread tomcat user
When accessing an HTTPSession through a back door the session's last access time is not updated. Is there any way to "touch" that session to update that time or call a specific method to do so? In other words I allow people to access their session through an xml request that may be called from a

Re: securing directory

2007-06-25 Thread tomcat user
able to allow certain directories to be viewed or not within a web server, but I guess not. Thanks again. Frank On 6/25/07, Caldarale, Charles R <[EMAIL PROTECTED]> wrote: > From: tomcat user [mailto:[EMAIL PROTECTED] > Subject: Re: securing directory > > assuming that a

Re: securing directory

2007-06-25 Thread tomcat user
> From: tomcat user [mailto:[EMAIL PROTECTED] > Subject: securing directory > > I would like to know if anybody can tell me how to restrict > web access to my web app's base directory and its sub directories. Read the servlet spec. Anything under WEB-INF is automatically invisible to

securing directory

2007-06-25 Thread tomcat user
Hi all, I would like to know if anybody can tell me how to restrict web access to my web app's base directory and its sub directories. i.e. webapp "Test1" has a file root.xml (tomcat\webapps\Test1\root.xml) While I do need read access programmatically, I need for web users to not access that fil

Tomcat context.xml problems

2006-12-04 Thread Tomcat User
Hi I need to register a custom JNDI resource after my web application started and unregister when it's stopped, how can I achieve this? Definition of the JNDI resource has to be stored in context.xml or web.xml. LifecycleListener afaik requires one of the servers' classloader Thanks in advance