Hi, True. But In my app(www.book-a-friend.appspot.com), all my JSP pages are inside web-inf folder. So it might not be accessed directly as a file,but rather can be served only by servlets.
Thanks Hari On Feb 11, 2011 1:07 AM, "Sekhar Ravinutala" <sek...@allurefx.com> wrote: Thanks Hari. If I understand you correctly, nothing stops unauthorized users from directly accessing internal pages (i.e., those other than login or index)...that's not acceptable for my app. -- You received this message because you are subscribed to the Google Groups "Google App Engine f... -- You received this message because you are subscribed to the Google Groups "Google App Engine for Java" group. To post to this group, send email to google-appengine-java@googlegroups.com. To unsubscribe from this group, send email to google-appengine-java+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine-java?hl=en.