Re: Verifying integrity of URLs

2003-10-05 Thread Max Cooper
, 2003 8:00 PM Subject: Re: Verifying integrity of URLs The requirement to allow a given to user to see only a subset of the data in a particular table is a relatively common one. For instance, in a sales reporting application, you may have a table of total monthly sales for a number

Re: Verifying integrity of URLs

2003-10-05 Thread Mark McLaren
From: Craig R. McClanahan [EMAIL PROTECTED] Reply-To: Struts Users Mailing List [EMAIL PROTECTED] To: Struts Users Mailing List [EMAIL PROTECTED] Subject: Re: Verifying integrity of URLs Date: Sat, 04 Oct 2003 14:04:19 -0700 Mark McLaren wrote: This is an excellent idea! I hate having

Re: Verifying integrity of URLs

2003-10-05 Thread Craig R. McClanahan
Mark McLaren wrote: From: Craig R. McClanahan [EMAIL PROTECTED] Reply-To: Struts Users Mailing List [EMAIL PROTECTED] To: Struts Users Mailing List [EMAIL PROTECTED] Subject: Re: Verifying integrity of URLs Date: Sat, 04 Oct 2003 14:04:19 -0700 Mark McLaren wrote: This is an excellent idea

Re: Verifying integrity of URLs

2003-10-05 Thread Mark McLaren
From: Craig R. McClanahan [EMAIL PROTECTED] Reply-To: Struts Users Mailing List [EMAIL PROTECTED] To: Struts Users Mailing List [EMAIL PROTECTED] Subject: Re: Verifying integrity of URLs Date: Sun, 05 Oct 2003 09:58:56 -0700 Mark McLaren wrote: From: Craig R. McClanahan [EMAIL PROTECTED

Re: Verifying integrity of URLs

2003-10-04 Thread Mark McLaren
. apologies if others have already posted similar comments - Ross's is the only email on this topic I'm aware of) From: Ross Sargant Subject: Verifying integrity of URLs Date: Mon, 01 Sep 2003 22:00:54 + Hi

Re: Verifying integrity of URLs

2003-10-04 Thread Craig R. McClanahan
: Ross Sargant Subject: Verifying integrity of URLs Date: Mon, 01 Sep 2003 22:00:54 + Hi, This may be a little off topic, but I thought I'd ask what the experts thought. Many actions often take URL parameters

Re: Verifying integrity of URLs

2003-10-04 Thread Max Cooper
Subject: Verifying integrity of URLs Hi, This may be a little off topic, but I thought I'd ask what the experts thought. Many actions often take URL parameters. For example a catalog system's viewItem action might include an id number for the item you wish to view. The action uses this ID to pull

Re: Verifying integrity of URLs

2003-10-04 Thread Max Cooper
I should have proofread my message before sending. Sorry. If one of my statements doesn't make sense, look here for a correction. Fixes: -- A mechanism that allowed you to register a security module with a particular (or a set of) Struts modules is also possible. A mechanism that allowed you to

Any progress/interest in a (WebObjects-like) page state cache Action for security? [WAS: Verifying integrity of URLs]

2003-09-04 Thread Mike Kienenberger
[This is a repost from Sept 2nd that doesn't appear to have made it to the list.] Ross Sargant [EMAIL PROTECTED] wrote: What is the best way in general to ensure that the user is not playing around with url parameters (in this example by manipulating the id parameter) to get at things they

Verifying integrity of URLs

2003-09-01 Thread Ross Sargant
Hi, This may be a little off topic, but I thought I'd ask what the experts thought. Many actions often take URL parameters. For example a catalog system's viewItem action might include an id number for the item you wish to view. The action uses this ID to pull something out of your RDBMS