Re: Struts2 authentication, validation, and roles

2012-10-04 Thread Łukasz Lenart
2012/10/3 Ken McWilliams : > Asking for the consideration of a struts2 feature enhancement. > > The roles interceptor depends on container based security, it is a bit > of a pain to set up and portability is complicated by needing to cover > more documentation steps (how to secure your application

Re: Struts2 authentication, validation, and roles

2012-10-03 Thread Gabriel Belingueres
Hi: I took a look at the ServletPrincipalProxy class, and it just delegates to the current request object to resolve authorization queries. There is not much more to do, since it is how the servlet standard is defined (the HttpServletRequest interface is the only one to query). So implementing a

Re: Struts2 authentication, validation, and roles

2012-10-02 Thread Lukasz Lenart
2012/10/3 Ken McWilliams : > Asking for the consideration of a struts2 feature enhancement. > > The roles interceptor depends on container based security, it is a bit > of a pain to set up and portability is complicated by needing to cover > more documentation steps (how to secure your application

Struts2 authentication, validation, and roles

2012-10-02 Thread Ken McWilliams
Asking for the consideration of a struts2 feature enhancement. The roles interceptor depends on container based security, it is a bit of a pain to set up and portability is complicated by needing to cover more documentation steps (how to secure your application on Glassfish, Weblogic, Tomcat...).