Re: slogin, container managed security, etc...

I put things under web-inf that need to be secure (ex: reports, because 
they have SQL).

sLogin might need to go under web-inf, but.... it uses j_password and 
J2EE container based security.
Looking at those files, one knows nothing about my JDBC realms or even 
if I use JDBC realms.
Those files are not called by actions, but container decides when to 
call those files.

The issue becomes that Resin and Tomcat will work, but BEA and IBM might 
not, because they tend to not implement full J2EE (regarding web-inf 
access). For example older builds (of IBM and BEA) could not even allow 
even actions to access JSP's bellow WEB-INF. I do want bP to run on any 
J2EE.
I was not sure if BEA / IBM would work right.

Having said that.... I will try in a later release to move them bellow 
WEB-INF and if they work in Resin/Tomcat, great.

hth,
.V


(To Chris: I will assume you have bP working on your machine now.).
pps:
Next build of bp will be beta version 1.0 and include reporting, options 
helpers,  stress testing, more flash, hopefully out in a week or so.

Chris Oberle wrote:

>Hello All,
>
>I know that placing files and markup under the WEB-INF
>directory effectively hides these file within the
>container and increases application security, but I'm
>curious about one particular aspect of Vic's
>implementation.  
>
>Specifically, I'm wondering what the reasoning is
>behind placing the slogin dir and associated jsp's in
>the root directory of the web-app rather than WEB-INF.
> I'm sure that there must a good reason for this but
>it continues to elude me.  Would someone mind
>explaining?
>
>Thanks,
>
>   Chris O.
>
>__________________________________
>Do you Yahoo!?
>The New Yahoo! Search - Faster. Easier. Bingo.
>http://search.yahoo.com
>  
>

-- 
Vic Cekvenich,
Struts Instructor,
1-800-917-JAVA

Advanced <a href ="baseBeans.com">Struts Training</a> and project recovery in North East. 
Open Source <a href ="baseBeans.com">Content Management</a>  basicPortal sofware
Best practice<a href ="baseBeans.com">Struts Support</a> v.1.1 helper ScafflodingXPress