Restricting Http methods thru tomcat configurations

[Gibu John]

How will I restrict http methods like delete put etc thru tomcat configuration or thru web.xml . I am not using security roles. authentication is thru database maintained users.

[Ben Souther]

You shouldn't need to.

Writing servlets amounts to white listing the methods you want to support by overriding them. The implementation of HttpServlet in Tomcat returns a 405 response code for any of the service methods that you don't explicitly override.

  
HTTP Status 405 - HTTP method POST is not supported by this URL  

Most people only override doPost and doGet.
[ March 17, 2008: Message edited by: Ben Souther ]