Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Syed Nayyer Kamran
hi there, I want to restrict the user to access the images directly through the web. They should be able to access these images through web pages developed as jsp/servlet but should not be able to access these images displayed on page by copying the image url to the address bar. Is tomcat direc

RE: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Shapira, Yoav
Nayyer Kamran [mailto:[EMAIL PROTECTED] >Sent: Monday, June 09, 2003 9:33 PM >To: [EMAIL PROTECTED] >Subject: Urgent : Can we restrict access to a directory in tomcat > >hi there, > >I want to restrict the user to access the images directly through the web. >They should be

RE: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Schwartz, David (CHR)
Store the images in your database & then your jsp can retrieve & show them. -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 9:44 AM To: Tomcat Users List Subject: RE: Urgent : Can we restrict access to a directory in tomcat Howdy, Th

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Tom Oinn
amran [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 9:33 PM To: [EMAIL PROTECTED] Subject: Urgent : Can we restrict access to a directory in tomcat hi there, I want to restrict the user to access the images directly through the web. They should be able to access these images through web pag

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread G. Wade Johnson
mInformatics > > > > > > > >>-Original Message- > >>From: Syed Nayyer Kamran [mailto:[EMAIL PROTECTED] > >>Sent: Monday, June 09, 2003 9:33 PM > >>To: [EMAIL PROTECTED] > >>Subject: Urgent : Can we restrict access to a directo

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread John Turner
e sufficient? A name that's hard for users to guess and use directly? Yoav Shapira Millennium ChemInformatics -Original Message- From: Syed Nayyer Kamran [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 9:33 PM To: [EMAIL PROTECTED] Subject: Urgent : Can we restrict access to a di

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Jason Bainbridge
On Mon, 9 Jun 2003 21:52, John Turner wrote: > Could you just put all of the images under WEB-INF, and use a special > servlet to get them? > > The source attribute of the IMG tag would be something like > /servlet/imgGetter?image=someUniqueKey. > > The servlet would just retrieve the image from th

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Jacob Kjome
v Shapira Millennium ChemInformatics -Original Message- From: Syed Nayyer Kamran [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 9:33 PM To: [EMAIL PROTECTED] Subject: Urgent : Can we restrict access to a directory in tomcat hi there, I want to restrict the user to access the images dire

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread John Turner
gt; > > >>-Original Message- >>From: Syed Nayyer Kamran [mailto:[EMAIL PROTECTED] >>Sent: Monday, June 09, 2003 9:33 PM >>To: [EMAIL PROTECTED] >>Subject: Urgent : Can we restrict access to a directory in tomcat >> >>hi there, >> >>I wan

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread John Turner
sers to guess and use directly? Yoav Shapira Millennium ChemInformatics -Original Message- From: Syed Nayyer Kamran [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 9:33 PM To: [EMAIL PROTECTED] Subject: Urgent : Can we restrict access to a directory in tomcat hi there, I want to re

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Dean Fantham
There is no guaranteed way to stop someone directly access a gif image via a browser url, because this is how an image is accessed by the browser itself anyways. The browser just makes a HTTP get request to the web-server (in this case tomcat) requesting the URL of the image to be included in the

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Scott Ahten
There is a very cool JSP/Servlet Filter developed for the Open For Business project which allows you to control what pages can be directly accessed via the address bar or other links. In other words, If someone tries to directly access a non authorized URL, instead of being sent there by re

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Justin Ruthenbeck
Without more information about the intended application, this discussion will continue to become more academic and less directly useful ... but, really, what's wrong with that? ;) If your app needs to serve images for non-authenticated users, but you want to approximate security (as if you're

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-09 Thread Jens Skripczynski
At 10:29 AM 6/9/2003, Dean Fantham wrote: > The only potential method that can catch most (but not all) of these > would be to create a separate image handling jsp/servlet, say > imageHandler. When imageHanlder servlet recieves an image request it > can check the http-referrer header and ensure th

RE: Urgent : Can we restrict access to a directory in tomcat

2003-06-10 Thread Schwartz, David (CHR)
just put the images in the database & serve them from there! -Original Message- From: Jens Skripczynski [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 8:42 PM To: Justin Ruthenbeck Cc: Tomcat Users List; Syed Nayyer Kamran Subject: Re: Urgent : Can we restrict access to a direc

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-10 Thread George Shafik
ECTED]> Cc: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Tuesday, June 10, 2003 3:29 AM Subject: Re: Urgent : Can we restrict access to a directory in tomcat > There is no guaranteed way to stop someone directly access a gif image > via a browser url, because this is how an

RE: Urgent : Can we restrict access to a directory in tomcat

2003-06-10 Thread Phillip Qin
Not sure if Catalina.policy will do the trick. -Original Message- From: G. Wade Johnson [mailto:[EMAIL PROTECTED] Sent: June 9, 2003 9:51 AM To: Tomcat Users List Subject: Re: Urgent : Can we restrict access to a directory in tomcat Unfortunately, this doesn't always work. In the

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-10 Thread Justin Ruthenbeck
lt;[EMAIL PROTECTED]> To: "Syed Nayyer Kamran" <[EMAIL PROTECTED]> Cc: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Tuesday, June 10, 2003 3:29 AM Subject: Re: Urgent : Can we restrict access to a directory in tomcat > There is no guaranteed way to stop someone d

RE: Urgent : Can we restrict access to a directory in tomcat

2003-06-10 Thread Cox, Charlie
. Charlie > -Original Message- > From: Justin Ruthenbeck [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 10, 2003 1:41 PM > To: Tomcat Users List > Subject: Re: Urgent : Can we restrict access to a directory in tomcat > > > At 04:27 AM 6/10/2003, you wrote: > >Apologies if

Re: Urgent : Can we restrict access to a directory in tomcat

2003-06-11 Thread sato
visit recently to get the image. > > Charlie > > > -Original Message- > > From: Justin Ruthenbeck [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, June 10, 2003 1:41 PM > > To: Tomcat Users List > > Subject: Re: Urgent : Can we restrict access to a