Re: [h2] web console Servlet - how to not allow others to create new databases

Hi, I'm not a Tomcat expert, but what about using authorization for this URL? See http://www.avajava.com/tutorials/lessons/how-do-i-use-basic-authentication-with-tomcat.html Regards, Thomas On Tue, Jun 3, 2014 at 3:57 PM, Adam McMahon a...@cs.miami.edu wrote: Hi, We use embedded H2 in a

[h2] web console Servlet - how to not allow others to create new databases

Hi, We use embedded H2 in a webapp with tomcat. We use the servlet webconsole to manage the database. Our database is password protected, which should allow some security. But I don't see how to prevent an unauthorized user from creating a new database and filling it with junk if they visit