Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-19 Thread Kiran Badi
rom: Kiran Badi [mailto:ki...@poonam.org] Sent: Tuesday, June 19, 2012 3:10 AM To: Tomcat Users List Subject: Protect JSP from Direct Access in Tomcat 7.0.xx Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. I have this mapping

RE: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-19 Thread Sharon Prober (sprober)
mcat Users List Subject: Protect JSP from Direct Access in Tomcat 7.0.xx Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. I have this mapping in web xml and this is not working,It seems that probably i need to define a role

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Kiran Badi
On 6/19/2012 10:22 AM, Tim Watts wrote: Hopefully, you're trying to use or move toward the MVC (Model, View, Controller) pattern. If not, you should. Google "MVC design pattern". There are many, many frameworks that will make this easier for you (once you learn them): Struts, Spring MVC... If

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Tim Watts
On Tue, 2012-06-19 at 08:48 +0530, Kiran Badi wrote: > No its not returning source code.I have couple of jsps where in I use EL > in those to access session objects and directly accessing those jsps is > not something I want. Good move. > >> 2. Is their any extra setting that is required if I

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Kiran Badi
On 6/19/2012 8:03 AM, Tim Watts wrote: Hi Kiran, On Tue, 2012-06-19 at 05:40 +0530, Kiran Badi wrote: Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. By "direct access" do you mean that http://host/myapp/sample.jsp is retu

Re: Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Tim Watts
Hi Kiran, On Tue, 2012-06-19 at 05:40 +0530, Kiran Badi wrote: > Hi All, > > I need your guidance again.I have bunch of JSP's close to 100+ which I > need to protect it from direct access. > By "direct access" do you mean that http://host/myapp/sample.jsp is returning the JSP source code rather

Protect JSP from Direct Access in Tomcat 7.0.xx

2012-06-18 Thread Kiran Badi
Hi All, I need your guidance again.I have bunch of JSP's close to 100+ which I need to protect it from direct access. I have this mapping in web xml and this is not working,It seems that probably i need to define a role first and then use below settings.But unfortunately my app is open inter