Good Morning Dave...
I would start by referencing this link
http://tomcat.apache.org/tomcat-6.0-doc/cgi-howto.html
either
setup security in %JAVA_HOME%/lib/security/java.policy and start java with
security manager enabled e.g.
JAVA -Djava.security.policy=java.policy %CATALINA_HOME%\bin\bootstrap.jar
OR
read everything you can on configuring %CATALINA_HOME%/conf/catalina.policy
and configure the necessary options in catalina.policy *this link should get
you started*
http://tomcat.apache.org/tomcat-4.1-doc/security-manager-howto.html
HTH/
Martin
This email message and any files transmitted with it contain confidential
information intended only for the person(s) to whom this email message is
addressed. If you have received this email message in error, please notify
the sender immediately by telephone or email and destroy the original
message without making a copy. Thank you.
----- Original Message -----
From: "David Kerber" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <users@tomcat.apache.org>
Sent: Tuesday, May 08, 2007 10:25 AM
Subject: ACL (access control list) tutorial or example
I posted this on comp.lang.java.security yesterday, but haven't gotten a
single answer, so I'm hoping you people can help:
I'm trying to implement ACL's in my Tomcat-based webapp, and am having
trouble applying what I read in the docs and in my googling to my
real-life application. Could somebody please point me to a good tutorial
or some example code that shows how to set and check the permissions (read
only vs read/write, administration vs general user, etc) that a given user
will have to access a given object?
I've got the authentication part going with no trouble, but am having
trouble with the access control side of things.
TIA!
Dave
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
