Yes, and it usually makes sense to approach this in a two-tier fashion: 1. Client Tier. Depending on what roles your user is in, the screen you paint for them should not even contain the links or buttons used to invoke operations or services they are not entitled to. In my application, I push entitlement information out to the UI so these decisions can be managed there during the rendering of a screen. For example, I have a Portfolio Browser which, if the user is in the Trader role, supports a right-click context menu which supports trade order entry. For all other users, the context menu is never even created.
2. Server Tier. You can implement the same role-based authorizations you currently have on the server. Your single entry point action class sounds a lot to me like the equivalent of a ServletFilter. The client side authorizations should mean that a request never fails on the server due to unauthorized use, but it is safer to have more than one checkpoint. So the answer is Yes. Walden On Sep 29, 11:04 am, "Vandana Adusumilli" <[EMAIL PROTECTED]> wrote: > Hi > in our current project only with struts we do some specific security checks > in one class which extends ActionServlet class.so this is the single entry > point for all the calls . can we implement this type of functionality in > GWT without using struts? I am new to GWT. > > > > On Mon, Sep 29, 2008 at 8:31 AM, walden <[EMAIL PROTECTED]> wrote: > > > Please be careful with terminology. > > > When you say "GWT to call struts action", do you mean a remote > > procedure call, or do you just mean a link to a new page that happens > > to be built by a struts action? > > > A GWT page is like any other page in its ability to embed links to > > other pages. > > > Could you explain more about how calling a struts action from a GWT > > page gives security (and we're not talking "job security", I > > assume ;-). > > > Walden > > > On Sep 28, 6:17 pm, sruj <[EMAIL PROTECTED]> wrote: > > > Hi > > > we have a project which uses struts 1.2 . and now started using > > > GWT ..for security we want GWT to call struts action.is it possible? > > > if so how? > > > > thanks in advance > > > sruj- Hide quoted text - > > - Show quoted text - --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to Google-Web-Toolkit@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/Google-Web-Toolkit?hl=en -~----------~----~----~----~------~----~------~--~---
