RE: security framework!!!

2004-03-22 Thread as as
InteresTing discussion.Is there more website links on the same Thanks! Craig R. McClanahan [EMAIL PROTECTED] wrote: (Jumping in late, and trying to catch up on several hundred email messages in my STRUTS-USER folder, but better late than never ...) Quoting David Friedman : Adam, With

RE: security framework!!! (Addendum to my previous post)

2004-03-22 Thread as as
Hi, Has anyone tried filters framework (filter tag in web.xml) in struts for role based access to webpages in a enterprise wide application...deployed in weblogic...we tried this and seems each sub-application needs a differenet, its own web.xml and a single integrated web.xml.. Any

RE: security framework!!!

2004-03-21 Thread Craig R. McClanahan
(Jumping in late, and trying to catch up on several hundred email messages in my STRUTS-USER folder, but better late than never ...) Quoting David Friedman [EMAIL PROTECTED]: Adam, With my structure, I might have to become a particular reseller, then flip into a customer of his/hers, then

Re: security framework!!!

2004-03-20 Thread as as
: security framework!!! Adam, With my structure, I might have to become a particular reseller, then flip into a customer of his/hers, then become one of their client accounts to look into a reported problem. I worry about login identities for the following reasons: Using a JAAS login, my

Re: security framework!!!

2004-03-18 Thread Max Cooper
: security framework!!! Adam, With my structure, I might have to become a particular reseller, then flip into a customer of his/hers, then become one of their client accounts to look into a reported problem. I worry about login identities for the following reasons: Using a JAAS login, my

Re: security framework!!!

2004-03-18 Thread Adam Hardy
- Original Message - From: David Friedman [EMAIL PROTECTED] To: Struts Users Mailing List [EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 5:48 PM Subject: RE: security framework!!! Adam, With my structure, I might have to become a particular reseller, then flip into a customer of his/hers

RE: security framework!!!

2004-03-17 Thread David Friedman
they do can be seen by no one else (though a manager might need to approve certain types of request). Regards, David -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Monday, March 15, 2004 10:28 AM To: Struts Users Mailing List Subject: Re: security framework!!! On 03

Re: security framework!!!

2004-03-17 Thread Adam Hardy
-Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Monday, March 15, 2004 10:28 AM To: Struts Users Mailing List Subject: Re: security framework!!! On 03/15/2004 03:00 PM David Friedman wrote: I should have explained this a bit better. Each level is like a company

RE: security framework!!!

2004-03-17 Thread David Friedman
-Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 6:51 PM To: Struts Users Mailing List Subject: Re: security framework!!! I don't see your requirement for replacing the principal when the admin wants to 'become' someone else. What are you

Re: security framework!!!

2004-03-15 Thread Adam Hardy
Message- From: Jason Lea [mailto:[EMAIL PROTECTED] Sent: Sunday, March 14, 2004 6:49 PM To: Struts Users Mailing List Subject: Re: security framework!!! David Friedman wrote: I've also been looking into security frameworks and the only solutions I've really found are: 1. Standard (container

RE: security framework!!!

2004-03-15 Thread David Friedman
into it to ensure good http/https lock-downs. Do you have any hints/suggestions for a better methodology/way? Regards, David -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Monday, March 15, 2004 4:25 AM To: Struts Users Mailing List Subject: Re: security framework!!! Right, I

Re: security framework!!!

2004-03-15 Thread Adam Hardy
: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Monday, March 15, 2004 4:25 AM To: Struts Users Mailing List Subject: Re: security framework!!! Right, I get it. So you not only want the higher level user to take on the lower level user's role, you want them to have their complete ID or username etc

RE: security framework!!!

2004-03-15 Thread Benz Lim
in struts... http://www.onjava.com/pub/a/onjava/2004/02/18/strutssecurity.html God Bless, Benz Lim -Original Message- From: David Friedman [mailto:[EMAIL PROTECTED] Sent: Monday, March 15, 2004 10:00 PM To: Struts Users Mailing List Subject: RE: security framework!!! Adam, I should have

Re: security framework!!!

2004-03-14 Thread Adam Hardy
On 03/13/2004 05:48 PM David Friedman wrote: My bigger problem is my scenario, which no one supports. I'd like to allow manager accounts to become one of if it's sub-accounts. My system would support at least 5 levels where 4 could 'drill down' and back up again: admin, reseller, client,

RE: a security framework!

2004-03-14 Thread Mailing List
Lipofsky [mailto:[EMAIL PROTECTED] Sent: Friday, March 12, 2004 2:37 AM To: Struts Users Mailing List Subject: RE: a security framework! I did something similar. I extended each struts HTML tag to take a rule and evaluate it in doStartTag. It then returns SKIP_BODY to hide it or super.doStartTag

Re: a security framework!

2004-03-14 Thread Adam Hardy
! Surprising no one mentioned it. Why?! Is there some thing wrong with using this tag! Thanks -Original Message- From: Daniel Lipofsky [mailto:[EMAIL PROTECTED] Sent: Friday, March 12, 2004 2:37 AM To: Struts Users Mailing List Subject: RE: a security framework! I did something similar. I

RE: security framework!!!

2004-03-14 Thread David Friedman
: Sunday, March 14, 2004 5:21 AM To: Struts Users Mailing List Subject: Re: security framework!!! On 03/13/2004 05:48 PM David Friedman wrote: My bigger problem is my scenario, which no one supports. I'd like to allow manager accounts to become one of if it's sub-accounts. My system would support

Re: security framework!!!

2004-03-14 Thread Adam Hardy
14, 2004 5:21 AM To: Struts Users Mailing List Subject: Re: security framework!!! On 03/13/2004 05:48 PM David Friedman wrote: My bigger problem is my scenario, which no one supports. I'd like to allow manager accounts to become one of if it's sub-accounts. My system would support at least 5

Re: security framework!!!

2004-03-14 Thread Jason Lea
. Regards, David -Original Message- From: Mailing List [mailto:[EMAIL PROTECTED] Sent: Saturday, March 13, 2004 6:19 AM To: [EMAIL PROTECTED] Subject: security framework!!! I'm developing a web application with struts.I had a problem for support security at jsp pages level for different roles.I

RE: security framework!!!

2004-03-14 Thread David Friedman
-Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Sunday, March 14, 2004 6:28 PM To: Struts Users Mailing List Subject: Re: security framework!!! You mean you don't want to force the user to log out and back in again? I would have thought that was a reasonable demand since

RE: security framework!!!

2004-03-14 Thread David Friedman
the admin), then become a client, then become a manager then become an employee to look at or fix something for them. Regards, David -Original Message- From: Jason Lea [mailto:[EMAIL PROTECTED] Sent: Sunday, March 14, 2004 6:49 PM To: Struts Users Mailing List Subject: Re: security framework

RE: security framework!!!

2004-03-13 Thread Robert Taylor
http://sourceforge.net/projects/securityfilter/ emulates container managed security. robert -Original Message- From: Mailing List [mailto:[EMAIL PROTECTED] Sent: Saturday, March 13, 2004 6:19 AM To: [EMAIL PROTECTED] Subject: security framework!!! I'm developing a web

RE: security framework!!!

2004-03-13 Thread David Friedman
: Mailing List [mailto:[EMAIL PROTECTED] Sent: Saturday, March 13, 2004 6:19 AM To: [EMAIL PROTECTED] Subject: security framework!!! I'm developing a web application with struts.I had a problem for support security at jsp pages level for different roles.I send an email and recived 2 response to solve my

RE: security framework!!!

2004-03-13 Thread Dmitry Brin
Oracle provides Single Sign On with OID - no extra work required. -Original Message- From: David Friedman [mailto:[EMAIL PROTECTED] Sent: Saturday, March 13, 2004 8:49 AM To: Struts Users Mailing List Subject: RE: security framework!!! I've also been looking into security frameworks

RE: security framework!!!

2004-03-13 Thread Mailing List
14, 2004 1:08 AM To: 'Struts Users Mailing List' Subject: RE: security framework!!! Oracle provides Single Sign On with OID - no extra work required. -Original Message- From: David Friedman [mailto:[EMAIL PROTECTED] Sent: Saturday, March 13, 2004 8:49 AM To: Struts Users Mailing List

Re: a security framework!

2004-03-11 Thread Niall Pemberton
/tilesAdvancedFeatures.pdf Also there is a tiles-documentation.war shipped with struts Niall - Original Message - From: Mailing List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 11, 2004 4:16 AM Subject: a security framework! Hi, I'm developing a web application with struts framework.I

RE: a security framework!

2004-03-11 Thread Daniel Lipofsky
call setDisabled() to disable the field if it is visible but not editable. It's not hard. - Dan -Original Message- From: Mailing List [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 8:17 PM To: [EMAIL PROTECTED] Subject: a security framework! Hi, I'm developing a web

a security framework!

2004-03-10 Thread Mailing List
Hi, I'm developing a web application with struts framework.I want to design some jsp pages that support security at pages level.The security that I want to be supported is that some components of each page can be shown for certain user.I mean that for each user deponds on his access to the system