Re: file access via HttpSession

2005-07-12 Thread Frank W. Zammetti
Shamelss plug: My Java Web Parts project (http://javawebparts.sourceforge.net) will have this capability, hopefully by this weekend, via its AccessControlFilter. It's now probably 50% written and in CVS, but I have to complete the IP-based limiting (I got side-tracked a bit and went off and di

Re: file access via HttpSession

2005-07-12 Thread Ben Souther
You could put the restricted directories under WEB-INF and then use a Front Controller Servlet to forward to or stream the files to the browser. On Tue, 2005-07-12 at 09:27, Clark Slater wrote: > Hello- > > I am running 5.0.19 > > Is there a way to restrict access to files in a directory base

file access via HttpSession

2005-07-12 Thread Clark Slater
Hello- I am running 5.0.19 Is there a way to restrict access to files in a directory based on a value in an HttpSession? For example: Customer c = (Customer) httpSession.getValue("Customer"); if (c.getCountryCode().equals("CAN")) their browser could display any HTML file in /webapps/ecat/p

Re: file access via HttpSession

2005-07-12 Thread Tim Funk
No, you would need to do this via a programmtic authorization. There is no declaritive way to do this. -Tim Clark Slater wrote: Hello- I am running 5.0.19 Is there a way to restrict access to files in a directory based on a value in an HttpSession? For example: Customer c = (Customer) h

file access via HttpSession

2005-07-11 Thread Clark Slater
Hello- I am running 5.0.19 Is there a way to restrict access to files in a directory based on a value in an HttpSession? For example: Customer c = (Customer) httpSession.getValue("Customer"); if (c.getCountryCode().equals("CAN")) their browser could display any HTML file in /webapps/ecat/p