Feature #1579

Updated by Sebastien Jacquot over 4 years ago

At this moment, images of facs edition can only be accessible by publishing them in the public tomcat directory. So even if a corpora access is restricted through profiles, images remain accessible to all clients by pointing to their URL (or parent directory, according to the server configuration).

h3. Solution 1

* create creates some kind of getfile.jsp page that reads and serves the images stored outside the public tomcat space and only if the user is connected and have the right permissions on the corpora, eg. : getfile.jsp?img=185&corpora=DISCOURS

h3. Solution 2

* TBD (using some Java classes instead of JSP page ?)

h3. Temporary workaround

* store stores the images in a subdirectory of the tomcat published space, eg. : /var/lib/tomcat7/webapps/txm/images
* protect this directory with basic authentication, see: http://www.linuxhelp.in/2012/08/password-protected-directory-in-tomcat.html