sorry I clicked submit I didnt mean it
my user.properties is as follows employee=employee projectManager=projectManager operationManager=operationManager resourceManager=resourceManager manager=manager and my roles.properties is as follows employee=employee projectManager=projectManager operationManager=operationManager resourceManager=resourceManager manager=manager I logged in with UN=manager and PW=manger who has the role=manager manager is the only one who can view reports i tried to view /timesheet/controller/ url pattern and I have a page showing the following directory structure allocations/ Wed, 17 Aug 2005 10:32:26 GMT operationmanagerapproval/ Wed, 17 Aug 2005 10:32:26 GMT projectmanagerapproval/ Wed, 17 Aug 2005 10:32:26 GMT projects/ Wed, 17 Aug 2005 10:32:26 GMT reports/ Wed, 17 Aug 2005 10:32:26 GMT when I click any of them excpetct reports I have status erro page when I click reports I proceed to see the directory structure of the reports folder So I think security wroks fine except when struts get in the way [/b] _________________________________________________________ Reply to the post : http://galaxy.andromda.org/forum/viewtopic.php?p=3935#3935 Posting to http://forum.andromda.org/ is preferred over posting to the mailing list! ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Andromda-user mailing list Andromda-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/andromda-user