Re: Securityfilter Improvements

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ivan,

Ivan Latysh wrote:
> I mean HttpRequest, because:

I still don't get it. What is HttpRequest?

> "Method PROPFIND is not defined in RFC 2068 and is not supported by the Servlet 
> API."

I see. How does WebdavServlet get around this problem?

> Servlet does not handle PROPFIND and some other types of request ...

Does the container throw an exception when PROPFIND is the method? Or,
does the servlet have to implement service(ServletRequest,
ServletResponse) and look for that particular method?

> And WebDAV: ... WebdavServlet extends HttpServlet ...
> 
> WebDAV security is a bitch, so if SF can handle such things you will bring some 
> users on-board.

Well, we're just a filter. If the container is objecting to certain
requests, there's nothing we can do about it.

Doesn't Tomcat support BASIC auth to protect the WebdavServlet? Or, is
all of the authentication and authorization for WebDAV built into the
WebdavServlet?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHL2j09CaO5/Lv0PARAoCxAKCLKMGgnn69NYVezyXZuhkkfNHLbgCggyQu
ZjI+HMASjOBZjUkq5QJNcFE=
=2AOv
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/