Looking at the javadoc of the ActionConfig.java class, I see a roleNames array property. It appears that the RequestProcessor.processRoles() looks at this list of roleNames to see if a user's role is contained in this list.
But I don't see in the struts-config_1_1.dtd any way of adding roles to actions. How is this accomplished. Do I need to protect these resources in the web.xml as specified in the Servlet 2.2 API? -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>