Hi Stephan, well, that's awkward.
Even if you are able to disable automatic deployment, anybody knowing his ways around Tomcat will be able to change the settings again thus make Tomcat load the other apps :( my idea would be to write a valve checking which apps are installed: If any other then your delivered apps are installed, Tomcat is forwarding the request to a customized error-page. however, even this solution will not prevent anybody from tampering. HTH Greg -- what's puzzlin' you, is the nature of my game gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]