Preventing access to Links on secure site

[buena]

I am working on a secure site done in JSP. The site requires users to login to access the content. I have a page that links to several pdf files like the ones below.

https://members.mysite.com/pubs/Pub1/2006/test.pdf

https://members.mysite.com/pubs/Pub2/2006/test.pdf

https://members.mysite.com/pubs/Pub3/2006/test.pdf

Is there a way to prevent access to these links - say if you just and cut and pasted them into a browser?

 

[portagal]

i believe restricted resource should be define on your web.xml file, you can update your web.xml file defining a <security-constraint> tag and define <url-pattern> to cover everything on 2006 dir (/2006/*) - of course assuming all material under 2006 are supposed to have restricted access.

<security-constraint>
<display-name></display-name>
<web-resource-collection>
<web-resource-name></web-resource-name>
<url-pattern>/pubs/pub1/2006/*</url-pattern>
</web-resource-collection>
</security-constraint>

 

[buena]

Thanks for the reply. I pasted the code above into the web.xml file, but it didn't do anything?

 

[portagal]

i thought you have defined the security for your app. and just asking how to define the secure resources. I am not an expert in this field but i know this much that all have to be defined on your web.xml file: <login-config> which defines what is your authentication method and you also have to define the <security-role> which contains the different roles you wish to have for your users and i should also mention that you should have <role_name> inside the <security-constraint> tag defining the name of the roles that are authorized for that constraint. I know this is not an thourgh answer you are looking for but still a clue to where to look and for what
BTW what webserver are you on?

Good Luck

 

[buena]

Ok, thanks. I will look into it some more.
The server is Tomcat 5.5

 

[sedj]

I still think it would be easier to write a Filter.

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk