Tomcat Web Application Manager - is it possible to limit what each user role can see? -

-

i couldn't find regarding on internet, expert here answer question.

i have set tomcat web application manager on test server, created roles/users in tomcat-users.xml follows:

<role rolename="manager"/> <user username="admin" password="admin" roles="manager"/> <user username="user1" password="password" roles="manager"/>

admin supposed have full rights on webapp manager, while user1 (and perhaps subsequent users) users have been granted permission upload/deploy war files.

right have same roles, see same ui upon logging in, want user1 see deploy/upload option - limited access webapp manager.

is possible achieve this? if yes, how? if no, acceptable compromise?

you didn't hard if couldn't find this. it's under "manager" section of tomcat users' guide:

http://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html#configuring_manager_application_access

with standard user-acces roles, cannot trying do. fortunately, there's nothing stopping inventing some.

let's want set different roles deploy , undeploy. add them tomcat-users.xml this:

<role rolename="deploy"/> <role rolename="undeploy"/>

now, modify manager webapp's web.xml , add auth-constraints allow these new roles access specific functions:

<security-constraint>   <web-resource-collection>     <web-resource-name>manual deployment</web-resource-name>     <url-pattern>/html/deploy</url-pattern>   </web-resource-collection>   <auth-constraint>      <role-name>manager-gui</role-name>      <role-name>deploy</role-name>   </auth-constraint> </security-constraint>  <security-constraint>   <web-resource-collection>     <web-resource-name>manual deployment</web-resource-name>     <url-pattern>/html/undeploy</url-pattern>   </web-resource-collection>   <auth-constraint>     <role-name>manager-gui</role-name>     <role-name>undeploy</role-name>   </auth-constraint> </security-constraint>

note have modify existing <web-resource-collection> /html/* users appropriate role (for instance, 'deploy' role) can access gui in order functions configured above.


Comments

Post a Comment

Popular posts from this blog

How do you change vbulletin's home page to the forums instead of the default (CMS or Activity Stream)? -

-
i have created website using vbulletin have installed cms , blog modules in in admin default setting forums when enter homepage url redirecting me http://www.demo.com/content/ content cms page please help for vbulletin versions < 4.2. need modify forum index page located in top level of vbulletin directory. based on url in question it's file: http://www.demo.com/index.php here contents of file, can choose whether cms or forum default home page. /** * can choose default script here. uncomment appropriate line * set default script. note: uncomment 1 of these, must * add // comment out script(s) not want use * default script. * * can choose default script if not plan move * file root of website. */ /** * use cms default script: */ require('content.php'); /** * use forum default script: */ // require('forum.php'); for vbulletin versions >= 4.2. there's new "navigation manager". you'll find control settin...
Read more

c++ - Troubles when compiling phash program -

-
here (probably) simple problem: i'm trying use perceptual hashing library phash ubuntu 11.10. had ffmpeg installed, way i've done: sudo apt-get install libphash0 sudo apt-get install libphash0-dev then tried compile program: #include <iostream> #include <phash.h> using namespace std; int main() { ulong64 myhash=0; ph_dct_imagehash("test.jpg", myhash); cout<<myhash<<endl; } when compiling, prints out: undefined reference `ph_dct_imagehash' any suggestion? should do? in advance! matteo monti you forgot link phash library, linker cannot find function. try adding -l phash gcc command line (or update makefile). if doesn't work, maybe you'll need specify library path (the location of *.a file) using -l "/usr/lib/"
Read more