How to securing midtier server while granting developers abilty to create jsp pages

[jdmartin]

Hello...

I am running SAS on REHL servers and have been asked to open up the midtier server to a developer so that they can create custom java server pages to support stored process.  The developers requires access to the directory  /opt/sas/sasconfig/midtier/Lev1/Web/WebAppServer/SASServer1_1/sas_webapps/sas.storedprocess.war/input.  Any recommendations on how to enable access to this directory without compromising the security of my midtier server configuration.  Many thanks.

[dpage]

Don't edit the WAR directly in the webapps directory (both for security concern, and the fact it would be lost if the webapp were ever rebuilt or re-deployed - which happens as part of a hotfix or update. Content edited there is also not available when you're using a clustered midtier)

https://go.documentation.sas.com/?docsetId=stpug&docsetTarget=webinput.htm&docsetVersion=9.4&locale=...

Covers how you can have the content put in Config\Lev1\Web\WebAppServer\SASServer1_1\sas_webapps\sas.storedprocess.war\input

and then it will be included when the application is rebuilt/redeployed.