GZ wrote: > IMHO, tile enables you to assemble the web page by including the outcome of > all the content tiles. The login redirect/forward logic should be handled > outside of tile's scope.
I use a Filter for authentication-- no cookie, or invalid cookie, and off you to to the login page before you ever get to the Struts Action, much less a Tile. Then authorization is handled in the Action also before it ever forwards to a tiles def. By the time you get to the JSP, it's way to late to be making decisions about whether or not the user is supposed to be there. Don't let him get there to begin with. -- Wendy Smoak Applications Systems Analyst, Sr. Arizona State University PA Information Resources Management