Restrict manager app to Contexts in one (virtual) Host

2003-10-16 Thread Florian Ebeling
Hi there, I wonder if there is any means to give users access to the manager application, but let them only manipulate contexts located within their own virtual Hosts? I think this question is one every ISP has to stumble across, provided he doesn't want to get please restart ... mails all

Re: Restrict manager app to Contexts in one (virtual) Host

2003-10-16 Thread Tim Funk
This lately (past 6 months) has been becoming a more common request. But the functionality is not there as distributed by tomcat. Patches welcome. Alternatives include: - Adding a filter to the manager app for finer grained control - Rewriting manager to allow its namespace to be authorized via

Re: Restrict manager app to Contexts in one (virtual) Host

2003-10-16 Thread Florian Ebeling
Hi, This is confusing. One second after posting I found in the javadoc for ManagerServlet this: [ManagerServlet is a] Servlet that enables remote management of the web applications installed within the same virtual host as this web application is Tims answere suggests, that it is not possible

Re: Restrict manager app to Contexts in one (virtual) Host

2003-10-16 Thread Tim Funk
Yes, you are OK if you restrict access to a single Host. My answer was geared towards finer grain control of restarting(or whatever) webapps within a single host. If all requirements are at the host level - I think your ok with what you have below. -Tim Florian Ebeling wrote: Hi, This is

Re: Restrict manager app to Contexts in one (virtual) Host

2003-10-16 Thread Florian Ebeling
Hi, Tim Funk wrote: Yes, you are OK if you restrict access to a single Host. My answer was geared towards finer grain control of restarting(or whatever) webapps within a single host. If all requirements are at the host level - I think your ok with what you have below. Host level is perfect