Hi David,

Yes, I think I would use FTPServer, as this would fit into my java web
service.

The file system would look like this:

/projects/<ProjName>/<MediaName>/upload

There would be many projName and MediaName directories. The upload dir
would be a temp dir, created by the web service, created just so a user
can upload a file. Once uploaded, the web service would take over, check
the file MD5, and if OK, move it to the correct location, and delete the
upload dir.

So the FTP server just needs to limit uploads to /projects/*/*/upload, I
guess, at least as a first stab.

How do I make an FTPLet to do that? Me being very green on all this.

Does this make any sense, or is there a better way?

Many regards,
John.
 


-----Original Message-----
From: David Latorre [mailto:[email protected]] 
Sent: 21 October 2009 10:56
To: [email protected]
Subject: Re: How to limit file upload and download to a set of
directories.

Hello John,

Do you mean with Apache FTPServer? How would relate this "upload
directory" to the user home root?  Do you need to still have access to
several other directories in the same tree?

You could use a custom FTPLet for this (or even a filesystem
implementation) but you'll have to figure out how to 'inform the
FTPLet' of what the allowed directory is.


2009/10/21 John Wilkinson <[email protected]>:
> Hi,
>
> In my web service I want the user to only be able to upload files to
an
> upload directory, which is created on the fly in response to an upload
> request from the client.
>
> On receiving the upload request the web service makes a new directory
> called upload, and sends the URI back to the client. The client then
is
> able to use this URI to upload files to that directory only.
>
> I need to be able to limit this access to only this directory. How do
I
> do that?
>
>
>
>
>
> Many regards,
>
> John.
>
>
>
>
>
>
> ______________________________________________________________________
> This email may contain privileged or confidential information, which
should only be used for the purpose for which it was sent by Xyratex. No
further rights or licenses are granted to use such information. If you
are not the intended recipient of this message, please notify the sender
by return and delete it. You may not use, copy, disclose or rely on the
information contained in it.
>
> Internet email is susceptible to data corruption, interception and
unauthorised amendment for which Xyratex does not accept liability.
While we have taken reasonable precautions to ensure that this email is
free of viruses, Xyratex does not accept liability for the presence of
any computer viruses in this email, nor for any losses caused as a
result of viruses.
>
> Xyratex Technology Limited (03134912), Registered in England & Wales,
Registered Office, Langstone Road, Havant, Hampshire, PO9 1SA.
>
> The Xyratex group of companies also includes, Xyratex Ltd, registered
in Bermuda, Xyratex International Inc, registered in California, Xyratex
(Malaysia) Sdn Bhd registered in Malaysia, Xyratex Technology (Wuxi) Co
Ltd registered in The People's Republic of China and Xyratex Japan
Limited registered in Japan.
> ______________________________________________________________________

______________________________________________________________________
This email may contain privileged or confidential information, which should 
only be used for the purpose for which it was sent by Xyratex. No further 
rights or licenses are granted to use such information. If you are not the 
intended recipient of this message, please notify the sender by return and 
delete it. You may not use, copy, disclose or rely on the information contained 
in it.

Internet email is susceptible to data corruption, interception and unauthorised 
amendment for which Xyratex does not accept liability. While we have taken 
reasonable precautions to ensure that this email is free of viruses, Xyratex 
does not accept liability for the presence of any computer viruses in this 
email, nor for any losses caused as a result of viruses.

Xyratex Technology Limited (03134912), Registered in England & Wales, 
Registered Office, Langstone Road, Havant, Hampshire, PO9 1SA.

The Xyratex group of companies also includes, Xyratex Ltd, registered in 
Bermuda, Xyratex International Inc, registered in California, Xyratex 
(Malaysia) Sdn Bhd registered in Malaysia, Xyratex Technology (Wuxi) Co Ltd 
registered in The People's Republic of China and Xyratex Japan Limited 
registered in Japan.
______________________________________________________________________

Reply via email to