"Jones, Dean" wrote:
>
>
> Is there a universal definition of ``Logged On'' ???
> In J2EE there is, but is not fully supported everywhere.
>
> Dean
>
> -----Original Message-----
> From: Wong Kok Wai [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, November 22, 2000 11:07 AM
> To: struts-user
> Subject: checklogon tag
>
> Just wondering: why not make the checklogon tag currently in the example
> as part of the core struts tags? IMHO, it is very useful.
Yep ... that is the issue. For this particular application, "logged on" means
the presence of a particular session attribute, of a particular class, under a
particular key. None of that seems really amenable to "standardization" by
making it a core tag.
In addition, if we were using container-managed security we wouldn't need such a
tag at all -- the servlet container would be preventing access to these pages
unless the user had successfully authenticated themselves and had appropriate
permissions.
Craig McClanahan
