How to securing midtier server while granting developers abilty to create jsp pages

jdmartin — Tue, 26 Nov 2019 16:33:06 GMT

Hello...

I am running SAS on REHL servers and have been asked to open up the midtier server to a developer so that they can create custom java server pages to support stored process. The developers requires access to the directory /opt/sas/sasconfig/midtier/Lev1/Web/WebAppServer/SASServer1_1/sas_webapps/sas.storedprocess.war/input. Any recommendations on how to enable access to this directory without compromising the security of my midtier server configuration. Many thanks.

Re: How to securing midtier server while granting developers abilty to create jsp pages

dpage — Tue, 26 Nov 2019 19:56:39 GMT

Don't edit the WAR directly in the webapps directory (both for security concern, and the fact it would be lost if the webapp were ever rebuilt or re-deployed - which happens as part of a hotfix or update. Content edited there is also not available when you're using a clustered midtier)

https://go.documentation.sas.com/?docsetId=stpug&docsetTarget=webinput.htm&docsetVersion=9.4&locale=en#p1174zlpool36cn18tebh7alb16v

Covers how you can have the content put in Config\Lev1\Web\WebAppServer\SASServer1_1\sas_webapps\sas.storedprocess.war\input

and then it will be included when the application is rebuilt/redeployed.

topic Re: How to securing midtier server while granting developers abilty to create jsp pages in Administration and Deployment

How to securing midtier server while granting developers abilty to create jsp pages

Re: How to securing midtier server while granting developers abilty to create jsp pages