in this case, Form is decalratively saying that it can be accessed only by "userRole". Now when you use CMA, every user will be bound to to a role.
RequestController compare the two roles one from user-in-request and other from ActionMapping/ActionConfig and continue.. However, you can also override the default behaviour of processRoles and go your own way. HTH Navjot Singh -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 18, 2004 8:49 PM To: Struts Users Mailing List Subject: Role based access? Hi Guys, Struts-config.xml <action attribute="Form" roles="userRole"> How do i use this 'roles' attribute to implement role-based access. Thanks and Regards Subramaniam Olaganthan Tata Consultancy Services Mailto: [EMAIL PROTECTED] Website: http://www.tcs.com --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]