Re: Struts Application Security within the Controller Layer

2004-04-18 Thread Nathan Maves
What errorthat looks like the normal startup messages of tomcat to me. Nathan On Apr 18, 2004, at 6:15 AM, [EMAIL PROTECTED] wrote: Hi All,  I have installed  Tomcat server on my machine and tried to start it using    startup.bat  im getting following  error C:\Tomcat\catalina\src\bin>st

Re: Struts Application Security within the Controller Layer

2004-04-18 Thread birendar . waldiya
Hi All,  I have installed  Tomcat server on my machine and tried to start it using    startup.bat  im getting following  error C:\Tomcat\catalina\src\bin>startup Using CATALINA_BASE:   C:\Tomcat\catalina\src Using CATALINA_HOME:   C:\Tomcat\catalina\src Using CATALINA_TMPDIR: C:\Tomcat\catalin

RE: Struts Application Security within the Controller Layer

2004-04-17 Thread Josh Holtzman
Users Mailing List Subject: RE: Struts Application Security within the Controller Layer The way to configure this flexibly for each action would be to define an extension of ActionMapping that was a bean with whatever config properties you need (for instance, a role or list of roles permitted to ac

Re: Struts Application Security within the Controller Layer

2004-04-17 Thread Niall Pemberton
t > I'm not sure. > > Please let me know your thoughts. Everyone else is also free to comment. > > Regards, > > Josh > > -Original Message- > From: Joe Germuska [mailto:[EMAIL PROTECTED] > Sent: Friday, April 16, 2004 9:07 AM > To: Struts Users Maili

RE: Struts Application Security within the Controller Layer

2004-04-16 Thread Joe Germuska
The way to configure this flexibly for each action would be to define an extension of ActionMapping that was a bean with whatever config properties you need (for instance, a role or list of roles permitted to access the action.) Of course, since each path gets only one ActionMapping, you may n

Re: Struts Application Security within the Controller Layer

2004-04-16 Thread Jason Miller
If your container supports servlet 2.3, use a filter. That's really the best place for a check like that. Jason Josh Holtzman wrote: Hello all, I'm working on a Struts application that contains 2 modules. Module 1 (default): a public website. Module 2: a user and administrative logi

Re: Struts Application Security within the Controller Layer

2004-04-15 Thread Bill Siggelkow
Josh Holtzman wrote: Module 2 obviously needs to be secure. To secure Module 2 I intend to build 2 measures into take the following steps: a) Before any action is executed check that the user is logged in by looking for a "User" object in the session. b) check that all connections are via the htt

RE: Struts Application Security within the Controller Layer

2004-04-15 Thread Josh Holtzman
15, 2004 11:31 AM To: Struts Users Mailing List Subject: Re: Struts Application Security within the Controller Layer >As a novice, but rapidly learning, Struts developer, I believe the logical >place to put these checks is to subclass the RequestProcessor and override >the processPreprocess() met

Re: Struts Application Security within the Controller Layer

2004-04-15 Thread Joe Germuska
As a novice, but rapidly learning, Struts developer, I believe the logical place to put these checks is to subclass the RequestProcessor and override the processPreprocess() method with this logic? I think your analysis is right on; it's not *wrong* to implement the security with a base abstract a