Re: [thredds] restricted access to fileServer-downloads?

Hi John,

you are right, it was probably a cache problem.
Although I cleared the cache everytime I changed the web.xml, it did not work. But this morning, it worked at once.

Thank you!
Remon



On 07/20/2011 06:06 PM, John Caron wrote:
On 7/20/2011 6:30 AM, Remon Sadikni wrote:
Dear THREDDS team,

I managed to set up restricted access to OPeNDAP-URLs and specific
folders like it is shown on:
http://www.unidata.ucar.edu/projects/THREDDS/tech/reference/RestrictedAccess.html


That is very nice, but I did not manage to get the fileServer-Download
restiction working. I added the following code to tomcat's web.xml:


<security-constraint>
<web-resource-collection>
<web-resource-name>restrict by URL</web-resource-name>
<url-pattern>/dodsC/ftpthredds/swe/*</url-pattern>
<url-pattern>/fileServer/ftpthredds/*</url-pattern>
<http-method>GET</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>tdsConfig</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>

The first Link (OPeNDAP) is restricted via username / pass form, but
the HTTPServer-Download not. What is wrong with my code?

Thank you very much,
Remon

Hi Remon:

im guessing that after your browser is automatically validating you
after the first time. try clearing your browser cache, or try a
different browser, or use a tool like "Live Http Headers" (firefox) to
see whats really going on.

John

_______________________________________________
thredds mailing list
thredds@xxxxxxxxxxxxxxxx
For list information or to unsubscribe, visit:
http://www.unidata.ucar.edu/mailing_lists/


--
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 Dipl. Inf. Remon Sadikni
 Scientific Programmer

 University of Hamburg / KlimaCampus Hamburg
 Center for Integrated Climate System Analysis and Prediction - CliSAP
 Grindelberg 5 / D-20144 Hamburg / Germany

 phone: +49-40-42838-7581
 email: remon.sadikni@xxxxxxx
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++