[jboss-user] block access to server side files that are dynamically generated...