Raffaele Ragni wrote:

> Paul, you're right. However this way I fear the user could potentially
> access to the files in the shared directory even if he isn't logged in (read
> authenticated).
> 
> Do you have any suggestion about how to let the user download, from
> jetspeed, a file stored in a directory placed outside Tomcat ?


Write download servlet/jsp.  The portlet should place a generate a "key" 
on the url that will authorize the servlet to download the file.
     http://foo.bar/DownloadServlet?file=companysecrets.pdf&key=432njlksj

> 

> Thanks !
> 
> Raffaele
> 
> ----- Original Message -----
> From: "Paul Spencer" <[EMAIL PROTECTED]>
> To: "Jetspeed Users List" <[EMAIL PROTECTED]>
> Sent: Tuesday, July 09, 2002 12:25 PM
> Subject: Re: HTTP Header by portlet
> 
> 
> 
>>Sounds like a link, <a href=...>
>>
>>Paul Spencer
>>
>>Raffaele Ragni wrote:
>>
>>
>>>So, if i want to make a client download a file in a secure mode (if i
>>>
> put on
> 
>>>a dir of tomcat the file can be viewed by anyone and) in wich way i
>>>
> should
> 
>>>do it?
>>>
>>>
>>
>>
>>--
>>To unsubscribe, e-mail:
>>
> <mailto:[EMAIL PROTECTED]>
> 
>>For additional commands, e-mail:
>>
> <mailto:[EMAIL PROTECTED]>
> 
> 
> 
> --
> To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
> 
> 



--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to