Throw an exception instead. If Struts has a default exception handler, translate the exception into a 403; but the goal is to give the user a chance to customize the response.
On Thu, Oct 17, 2013 at 6:46 AM, Lukasz Lenart <[email protected]>wrote: > 2013/10/10 Lukasz Lenart <[email protected]>: > > 2013/10/10 Steven Benitez <[email protected]>: > >> Yeah, I'm not a fan of the Judge name either. Guard is better, but I'm > not > >> sure if it's best. What would the API look like? > > > > Not sure yet, something like this: > > > > public class SecurityGate { > > > > private List<SecurityGuard> guards; > > > > public void check(HttpServletRequest) { > > for(SecurityGuard guard : guards) { > > SecurityPass pass = guard.accept(HttpServletRequest); > > if (pass.notAccepted()) { > > throw new StrutsSecurityException(pass.getGuardMessage()) > > } > > } > > } > > > > } > > Right now I'm planning just to throw an exception and call > sendError(HttpServletResponse.SC_BAD_REQUEST, e.getMessage()), WDYT? > > > Regards > -- > Łukasz > + 48 606 323 122 http://www.lenart.org.pl/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > -- Cheers, Paul
