Yes the app navigation, not the browser ;). For the former case, if I put it in a pop-up and they close it without changing the pw, I'd then have to worry about disabling the parent browser. I guess I could have the change password action complete the logon process and place the appropriate indicator in the session which pages would check for to see if the user is logged on.
Sound right? -----Original Message----- From: David Graham [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 12, 2002 5:35 PM To: [EMAIL PROTECTED] Subject: Re: Disable Navigation Just to make sure, you're not disabling the browser navigation right? Just the app's navigation? Your users won't be pleased if you break their back button :-). You could probably use the HTTP_REFERER header attribute to tell where they came from. You could also use the same jsp component but in the first case put it in a popup window without the navigation components. Dave >From: "Cohan, Sean" <[EMAIL PROTECTED]> >Reply-To: "Struts Users Mailing List" <[EMAIL PROTECTED]> >To: 'Struts Users Mailing List' <[EMAIL PROTECTED]> >Subject: Disable Navigation >Date: Thu, 12 Sep 2002 17:26:29 -0400 > >For our app, if the user logs in for the first time or if the user's >password is 30 days old, we require that they change it immediately logging >in. So from the logon action we send them to a password.jsp. But the user >should also be able to go to password.jsp anytime after logging in from >(just about) any other jsp. > >For the former case, we would want to disable any navigation on >password.jsp. And for the latter case enable the navigation. How can I >distinguish when I should disable the navigation? That is, how do I know >that they came from the logon action and not some other jsp? > >Or should I be using two separate password pages? > >Thanks. > >-- >To unsubscribe, e-mail: ><mailto:[EMAIL PROTECTED]> >For additional commands, e-mail: ><mailto:[EMAIL PROTECTED]> _________________________________________________________________ Join the world's largest e-mail service with MSN Hotmail. http://www.hotmail.com -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
