Re: SuPHP alternative for JSP and Tomcat

2006-07-19 Thread Vaclav Kaspar
Edmund Urbani wrote: Vaclav Kaspar wrote: I want to prevent these example situations user user1 have in his jsp script something like FileWriter fw = new FileWriter("/home/USER2/somefile"); fw.write("blablabla"); fw.close(); or File f = new File(/home/USER2/); String[] files =File.list(

Re: SuPHP alternative for JSP and Tomcat

2006-07-19 Thread Edmund Urbani
Vaclav Kaspar wrote: >> > I want to prevent these example situations > user user1 have in his jsp script something like > FileWriter fw = new FileWriter("/home/USER2/somefile"); > fw.write("blablabla"); > fw.close(); > > or > File f = new File(/home/USER2/); > String[] files =File.list(); > Fi

Re: SuPHP alternative for JSP and Tomcat

2006-07-19 Thread Vaclav Kaspar
Pid wrote: Do you want to prevent all users from access the file system, or permit individual users access to their own part? Peter Crowther wrote: From: Vaclav Kaspar [mailto:[EMAIL PROTECTED] For security reasons I need JSP scripts to run under different users A single JVM runs a

Re: SuPHP alternative for JSP and Tomcat

2006-07-19 Thread Pid
Do you want to prevent all users from access the file system, or permit individual users access to their own part? Peter Crowther wrote: >> From: Vaclav Kaspar [mailto:[EMAIL PROTECTED] >> For security reasons I >> need JSP scripts to run under different users > > A single JVM runs as a single

RE: SuPHP alternative for JSP and Tomcat

2006-07-19 Thread Peter Crowther
> From: Vaclav Kaspar [mailto:[EMAIL PROTECTED] > For security reasons I > need JSP scripts to run under different users A single JVM runs as a single user. To my knowledge, there's no way of setting threads in a JVM to run as different users, so you're pretty much stuck if you want to run in a