JSP security

[Alain Russell <alain.russell@xxxxxxxxxxxxxxxxx>]

I am running Tomcat on my Server and need to be able to limit a hosts access
to their own directory.

EG. I have a host www.domain.com set up to process JSP with a <host ... In
the server.xml file.

How do I limit their access to their
/library/webserver/websites/www.domain.com/ directory in JSP, they wrote a
script to demonstrate to me the full system access they have for file
manipulation (luckily, the client does contract work for me and is 'on my
side'). With the script they can view/add/edit & delete any file on the
entire system ??

This is from a standard install of Tomcat and iTools 6.1.
Thanks in advance

Alain


---
Tenon Intersystems' itools Mailing List
To unsubscribe: send mailto://itools-request@xxxxxxxxxxxxxxx
with the body: unsubscribe