• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Securing Uploaded files..

 
Bhiku Mhatre
Ranch Hand
Posts: 127
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
We are developing an intranet project where administrator can upload files.The files are stored in file system. The access to these should be controlled depending on the rights.But at the moment any body who knows the link can view it. How can I control the access to the files ??
Secondly, We are also developing a spying tool. But direst access to the files bypass our spying servlets and is rendered ineffective.
We are using WAS 4.0.AE.
Can any body help ???
 
james edwin
Ranch Hand
Posts: 393
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Pappu Pager,
01) regarding your first question define secuirty role in your deployment descriptor,there u can define which user has which rights.
02) use any kind of secuity mechanish which WAS(AE)4.0 supports.
Basic authentication
Digest authentication - WAs does not suport this.
Form authentication
Client certificate
I hope abv helps.

(pls change your name,as this aganist naming policy)
[ April 18, 2002: Message edited by: james edwin ]
 
Bhiku Mhatre
Ranch Hand
Posts: 127
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thanks James for your reply.
But can you provide me a link that explains me step-by-step how to do it ??
Looking forward to your reply..

As suggested I have changed my Screen-Name
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic