Question regarding security of delivered jsp's.

[Joe Hoffman <jhoffman@harland.net>]

How can I deliver runnable JSP's to my customers without extending them
the ability to edit/change the JSP content?

One suggested idea is to have a switch (I"m not sure where) that
indicates that only generated .class files should be used, and thus not
look for .jsp files.   Therefore I would only have to deliver the
contents of the generated directory (apache).     Maybe there is a way
to extend this idea somehow and just deliver a jar file that contains
all my generated class files.

Has anyone thought of this issue and are there any good/proposed
solutions?

regards

joe hoffman
Harland Corp.
Denver, CO