Re: Authentication - based on request parameters

[xing zhanjun]

do it like list below,then the client could only submit his request by the 
POST method 

   <security-constraint>
        <display-name>Example Security Constraint</display-name>
        <web-resource-collection>
        <web-resource-name>Protected Area</web-resource-name>
                <url-pattern>yourProtectedDir/*.jsp</url-pattern>
                <http-method>DELETE</http-method>
                <http-method>GET</http-method>
<!--
                <http-method>POST</http-method>
-->
                <http-method>PUT</http-method>
        </web-resource-collection>
_________________________________________________________________
与联机的朋友进行交流，请使用 MSN Messenger:  http://messenger.msn.com/cn  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]