A low privileged authenticated Matillion user is able to download the webserver logfile Catalina.out by requesting the URL /download_log. This logfile contains information about the webserver, verbose errors when they occur and more general logging. This information also includes the usernames used by the application.
Is it possible to disable the 'Download Server Log' options for certain users or remove the user info from the server log?