hi sree,

I suppose all you wish to do is to control flow/display based on different
roles.

If yes and you have struts 1.1, pls read on.

Struts allows you to set roles for different actions using
strust-config.xml. So, user belonging to particular role say "ADMIN" can
call that ACTION.

Moreover, in your JSPs, you can always check isUserInRole() etc. it's just
call on your request object.
Struts even provide the tag for that <logic:present role="admin"/> et al..

do write should you need more help.
Navjot Singh


|-----Original Message-----
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED]
|Sent: Wednesday, August 20, 2003 12:26 PM
|To: [EMAIL PROTECTED]
|Subject: RE: Security and Roles related
|
|
|
|Hi Navjot,
|
|Thanks for your response. Will you be able to elaborate a little more on
|your statement "STRUTS supports JAAS". I understand that JAAS is the J2EE
|based authentication and authorization component. So from a STRUTS
|perspective what is involved in tying up with JAAS to use the JAAS specific
|API's ? And will I have any facility in the JSP to check for the roleType
|before including a particular section of the page.
|
|Regards
|Sreekant G
|
|
|
|
|
|                      "Navjot Singh"
|
|                      <[EMAIL PROTECTED]        To:       "Struts
|Users Mailing List"
|                      ia.net>
|<[EMAIL PROTECTED]>
|                                               cc:
|
|                      08/19/2003 05:30         Subject:  RE:
|Security and Roles related
|                      PM
|
|                      Please respond to
|
|                      "Struts Users
|
|                      Mailing List"
|
|
|
|
|
|
|
|
|
|struts provide support for JAAS and JAAS further supports the security
|roles
|and accesses independent of mechanisms.
|will that do?
|
|hth
|-navjot
|
||-----Original Message-----
||From: [EMAIL PROTECTED]
||[mailto:[EMAIL PROTECTED]
||Sent: Tuesday, August 19, 2003 4:38 PM
||To: [EMAIL PROTECTED]
||Subject: Security and Roles related
||
||
||Does STRUTS provide integration with any security framework independent of
||the underlying application server. Basically I am looking at services like
||isUserInRole(), getRole() and the sort.
||
||Regards
||Sreekant G
||@ 98404-65630
||
||
||
|
|
|---------------------------------------------------------------------
|To unsubscribe, e-mail: [EMAIL PROTECTED]
|For additional commands, e-mail: [EMAIL PROTECTED]
|
|
|
|
|
|
|


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to