Wes>> I accomplished Form based auth by defining a security constraint in web.xml for
the Action path.
<web-resource-collection>
<web-resource-name>SecurePages</web-resource-name>
<description>Security constraint for Admin</description>
<url-pattern>/do/secure/*</url-pattern>
<http-method>POST</http-method>
<http-method>GET</http-method>
</web-resource-collection>
Cal
http://www.calandva.com/ Last update 08/01/03
-----Original Message-----
From: Wes Kubo [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 02, 2003 11:56
To: Struts Users Mailing List
Subject: Problem with tiles and protected jsps
I originally had my jsps under WEB-INF to prevent them from direct access,
which worked just fine. However, the standards I'm working with dictate that
the jsps be located above WEB-INF. In order to prevent access to my jsps I
added a security-constraint in web.xml, blocking access to the jsps.
Unfortunately, now none of my tiles display properly, instead I get the
error message:
[Exception in:/jsp/body/home_body.jsp] Response has already been committed
for all the protected pages. The problem is that for each protected page,
its trying to authenticate the user using the FORM authentication that I
have set-up for parts of the application (this is a separate
security-constraint from the jsp protection). All I want to prevent is
direct access to the jsp, not access through other means (e.g. action/tile).
Thanks.
Wes
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Learn more about Paymentech's payment processing services at www.paymentech.com
THIS MESSAGE IS CONFIDENTIAL. This e-mail message and any attachments are proprietary
and confidential information intended only for the use of the recipient(s) named
above. If you are not the intended recipient, you may not print, distribute, or copy
this message or any attachments. If you have received this communication in error,
please notify the sender by return e-mail and delete this message and any attachments
from your computer.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
