Rule #1 - don't post configuration or use questions to the tomcat-dev list...that's what tomcat-user is for.
That said, look at ./conf/web.xml for the 'listings' init-param of DefaultServlet. Setting this parameter to 'false' will deny directory listings. -chris > -----Original Message----- > From: Luo, Zhongjun [mailto:[EMAIL PROTECTED] > Sent: Friday, August 15, 2003 11:41 AM > To: [EMAIL PROTECTED] > Subject: limits the access of upper directory > > > Dear Sir/Madam: > > I have used Tomcat to make a web site, please see: > http://bac-portal.mc.vanderbilt.edu/BAC/BACWEB.jsp > Would you please tell me how I can limit the access to whole > name of this site only? > For example. now people can access (by deleting /BACWEB.jsp): > http://bac-portal.mc.vanderbilt.edu/BAC where I have other > sites developing. > > Thank you a lot for give me the convenience to built this web > site. Tomcat is great. > > Zhongjun Luo, Ph.D. > ******************************** > Research Assistant Professor > Genetic Medicine Department > Vanderbilt University Medical Center > Nashville, TN 37232 > > ******************************** > >