Tomcat roles for specific applications 1

[thrybergh]

Hi

I would like to define a role within Tomcat to allow a special user access to stop/start one named application. Is this possible, or is such a "fine tuning" of the access not allowed? I would be concerned that they may stop/remove the wrong application by accident if they were given full manager access.

Thanks.

 

[flowcontrol]

I think that you should be able to write a servlet that uses the Tomcat Manager's HTML interface. The way I envision it, access to this servlet is restricted to the desired user. The servlet sets request headers for the username and password that Tomcat Manager requires, then issues an HTML request (reload) or two requests (stop, start). (Note: I've read that, in Tomcat 5, the reload command does not re-read the application's deployment descriptor; you have to stop and start to force that.)

So, you should be able to issue:

http://domainname:port/manager/reload?path=/myContextPath