RE: Disabling put and delete http methods

2006-03-27 Thread Allistair Crossley
try changing * To ? -Original Message- From: Stephen More [mailto:[EMAIL PROTECTED] Sent: 25 March 2006 18:25 To: users@tomcat.apache.org Subject: Disabling put and delete http methods I am having problems trying to disable put and delete. I have searched the Internet and they

Re: Disabling put and delete http methods

2006-03-26 Thread Bill Barker
Urm, what part of 'disabled' don't you understand ;-). Tomcat has refused to pass on the request to the Servlet, since nobody is authorized to perform this Method on it (hence the 403 - Forbidden). Sending 404 is just wrong, since the resource does exist. Sending 405 would mean that Tomcat is

Re: Disabling put and delete http methods

2006-03-26 Thread Stephen More
My jakarta-tomcat-5.0.28/conf/web.xml now contains: Disallowed Location /* PUT DELETE But when I try to: DELETE /tomcat-docs/changelog.html I get 403 Access Denied instead of a 404 or 405. It does not appear that the DELETE option has been disabled. What else do I need to

Re: Disabling put and delete http methods

2006-03-25 Thread Bill Barker
Well, your is pretty much of a cluster-f*ck. Firstly, you need /*. Then you need (which is deny-from-all, what you have below is allow-from-authenticated-users). I'm guessing that there is more that you're not telling us. While I'm way too lazy to test this myself, I'm having trouble beli