I'm not sure how elegant this solution is, but I thought I'd post this for the archives... To disallow "normal" access to your action class' .jsp pages, I've disallowed access to anything .jsp through normal access...I've put them in the WEB-INF directory before, but on windows, you'll run into major problems if your template files get below say three directories deep (the generated filename becomes too long)...my solution was to use the .jhtml extension for "normal" jsp pages, while using the .jsp extension just for action class pages, and put them in the normal directory structure, which reduces the length of the generated filename for jsp pages...this seems to work ok for me since those pages are always loaded internally and not redirected to... Jon Brisbin www.jbrisbin.net Lamar, MO
