Win a copy of Learn Spring Security (video course) this week in the Spring forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Disable index page

 
michael yue
Ranch Hand
Posts: 204
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Dear all,

How can I disable the index page, admin tool, examples and so on from the public access. I dont want to allow anybody to access these pages. thanks
 
William Brogden
Author and all-around good cowpoke
Rancher
Posts: 13055
6
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
1. index page - see the <welcome-file-list> element of the default web.xml - to prevent a file listing, search for the "listings" parameter in web.xml
2. access to admin and manager tools is protected by the respective roles defined in tomcat-user.xml - if you don't define a manager or admin role, nobody can get to the tool.
3. to prevent access to examples, just delete the directory and restart tomcat
4. for more subtle access control see the security manager docs installed with tomcat
Bill
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic