Permissions

WELD files and included fragments should be the property of the web page designer. In order to prevent tampering (aka "adjustment") by programmers, these should be world-readable but prevent write access by the programmers. Typically, this should be handled at the directory level.

The counter file can be world-readable, but writeable only by the web server.

The weld.jar, jacl.jar, and tcljava.jar should be world-readable, but writeable only by the system administrator.

The class directory for commands (e.g. "/usr/local/apache/servlets/us/oh/state/dot/OHPS/commands") should be readable by the web server, but writeable only by the programmers.

The weld.properties file and session.tcl file should be world-readable, but writeable only by the programmers.

The web server and servlet container files should only be writeable by the administrator.

Contents

System Administration

Installing on UNIX

Permissions

Previous: Directories | Next: Restricting Commands

Modified: Wed Apr 19 15:56:09 EDT 2000