Re: Authorization/ Authentication

2010-12-28 Thread Wendy Smoak
On Tue, Dec 28, 2010 at 11:10 AM, Amol Ghotankar wrote: > Even I am searching for some better way in which authentication can be done > using struts2 or spring security toghether. You might want to look at Codehaus Redback. Even if you end up not using it, you might find some ideas there. (Red

Re: Authorization/ Authentication

2010-12-28 Thread Brian Thompson
Personally, I'd lean towards having showSales.action always show a report specific to the current user. Then the manager wouldn't click on showSales.action. She'd click on showSalesSummary.action which would have a completely customized query. -Brian On Tue, Dec 28, 2010 at 3:25 PM, wrote:

Re: Authorization/ Authentication

2010-12-28 Thread stanlick
Dave is right in that there are truly a dozen ways to do this. However, Struts does not have an out-of-the-box solution governing user/role level permissions. Does your company have a user user based permissions system in house today where permissions are determined according to the user logged i

Re: Authorization/ Authentication

2010-12-28 Thread Amol Ghotankar
I can elaborate on the requirement as follows, Assume a simple action which is authorized to be called by sales dept people only. i.e showSales.action When a user from purchase dept tries to call this action then, an interceptors will check whether the user in role has the authorization to access

Re: Authorization/ Authentication

2010-12-28 Thread Dave Newton
On Tue, Dec 28, 2010 at 11:10 AM, Amol Ghotankar wrote: > Even I am searching for some better way in which authentication can be done > using struts2 or spring security toghether. > > No direct or simple example to explain it working together. > > Specially for these two cases where > > 1. which u

Re: Authorization/ Authentication

2010-12-28 Thread Amol Ghotankar
Hello, Even I am searching for some better way in which authentication can be done using struts2 or spring security toghether. No direct or simple example to explain it working together. Specially for these two cases where 1. which user can access which action, is stored in database -> authori

Re: Authorization/ Authentication

2010-12-27 Thread Greg Akins
On Mon, Dec 27, 2010 at 8:36 AM, Jordi Fernandez wrote: > Have you considered Spring Security? > http://static.springsource.org/spring-security/site/ No.. I'll have to read a bit more; but my first guess is that I'd have to do some refactoring of some legacy code ( I need to use the same underlyi

Re: Authorization/ Authentication

2010-12-27 Thread Greg Akins
On Mon, Dec 27, 2010 at 8:59 AM, Dave Newton wrote: > (Let me clarify slightly.) > OK, I think I understand. The Interceptor should check if the session is authenticated, but should perform the Login. That's what I would have done, so maybe that's what confused me. Thanks for clearing that up.

Re: Authorization/ Authentication

2010-12-27 Thread Dave Newton
(Let me clarify slightly.) On Mon, Dec 27, 2010 at 8:38 AM, Dave Newton wrote: > Why/how did it confuse you? Login shouldn't be /performed/ by an > interceptor, an interceptor should check if a user has logged in for a given > resource and if not redirect to a login page. > > The /action/ of log

Re: Authorization/ Authentication

2010-12-27 Thread Dave Newton
27;re trying to figure out. Dave On Dec 27, 2010 7:18 AM, "Greg Akins" wrote: > I'm just starting to research the appropriate Struts2 way to do > Authorization/Authentication. > > Looks like a LoginInterceptor on the default stack is the way to go > (though I found

Re: Authorization/ Authentication

2010-12-27 Thread Jordi Fernandez
Have you considered Spring Security? http://static.springsource.org/spring-security/site/ On 27/12/2010 14:17, Greg Akins wrote: I'm just starting to research the appropriate Struts2 way to do Authorization/Authentication. Looks like a LoginInterceptor on the default stack is the way

Authorization/ Authentication

2010-12-27 Thread Greg Akins
I'm just starting to research the appropriate Struts2 way to do Authorization/Authentication. Looks like a LoginInterceptor on the default stack is the way to go (though I found a post at javaranch, by Dave Newton - http://www.coderanch.com/t/438760/Struts/Struts-Authentication-Authoriz

Re: looking for struts authorization authentication

2006-04-19 Thread James Mitchell
You might also look at jsecurity. It is free/lgpl. http://www.jsecurity.org/ -- James Mitchell On Apr 19, 2006, at 8:40 AM, C. Grobmeier wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This has been recommended on this list before a while: http://www.acegisecurity.org/ A. Lotfi wro

Re: looking for struts authorization authentication

2006-04-19 Thread C. Grobmeier
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This has been recommended on this list before a while: http://www.acegisecurity.org/ A. Lotfi wrote: > Hi, I looked for a struts that different categorie of users login and got > forwarded to different pages, please help me if you have a tutorial or

Re: looking for struts authorization authentication

2006-04-06 Thread Adam Hardy
A. Lotfi on 05/04/06 20:05, wrote: Hi, I looked for a struts that different categorie of users login and got forwarded to different pages, please help me if you have a tutorial or web application . thank you, your help is appreciated. If you are looking for example applications, try browsing th

looking for struts authorization authentication

2006-04-05 Thread A. Lotfi
Hi, I looked for a struts that different categorie of users login and got forwarded to different pages, please help me if you have a tutorial or web application . thank you, your help is appreciated. - Talk is cheap. Use Yahoo! Messenger to make