webtier@glassfish.java.net

Re: Web applications access control

From: <forums_at_java.net>
Date: Thu, 15 Dec 2011 09:05:19 -0600 (CST)

by 'accessible internally' ... do you mean it should not be available
'externally' at all or only accessible with proper authorization? If you mean
the first one I don't think this is possible as you can only 'assign' the
whole application to a virtual server, not parts of it. If you can separate
the two web-apps into two apps then you can use virtual server concept.
However if one knows what to do it can easily be bypassed ... so it's not
really secure. Another possibility would be to frontend GF with a
'reverse-proxy' kind of thing which does not allow to request specific URIs.
-Bernhard


--
[Message sent by forum member 'bthalmayr']
View Post: http://forums.java.net/node/874293