|
Home > Archive > WebSphere Application Server > September 2005 > Can't write a file to web-inf directory
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Can't write a file to web-inf directory
|
|
|
| I'm involved in writing a web application that allows users to store files on the server and then download them again later.
Because the information is highly sensitive, I don't want the user to be able to access the document diretly from a link, but only through my serlvet which will check access rights.
Because the J2EE spec specifies that files in the /WEB-INF folder cannot be accessed direcly, I want to store these files in a subdirectory under WEB-INF. However, when I try writing a file to that directory, I get "Access denied". Since I don't believ
e the J2EE spec says anything about WEB-INF not being writeable, this must be a WebSphere issue.
When I try to write files to any other directory under the web root, it works fine.
Does anyone know how I can get around this issue and write files to the /WEB-INF directory? Is there some setting in the Admin console that will allow this?
I'm using Rational Application Developer V6, deploying to the WAS 5.1 test environment.
| |
|
| If you're concerned about security, I think the best practice would be storing files on a security restricted filesystem or directory.
Under web-inf only should be application files, I think, not user data. Plus, if I recall correctly NetworkDeployment can mess your files if you write down there when it replicates configuration along nodes...
|
|
|
|
|