Does anyone have any thoughts on fine grained access control in
Struts?
Struts enables access control based on actions (see “Struts in
Action”, Husted, et. al., pp 550-553), and most application servers
can protect resources based on realms/roles.
But what about display options based on roles.
-logic.html#present
David
From: Mike Duffy [EMAIL PROTECTED]
Reply-To: Struts Users Mailing List
[EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Fine Grained Access Control in Sturts
Date: Thu, 20 Mar 2003 12:23:07 -0800 (PST)
Does anyone have any thoughts on fine grained access control
Does anyone know of a Struts work around for the problem with Tomact
in bookmarking the login page for container managed security?
There was a brief thread on this issue about a month ago
[http://www.mail-archive.com/[EMAIL PROTECTED]/msg59734.html]
There is a SourceForge project called
It is not necessary to create a specialty tag.
If you are using container managed security and your users are set in
specific roles you can use the logic:present tag with the role
attribute.
I do think the right way to do this is have the view conditional
based on roles.
Mike
--- Marco
Status 400 - Invalid direct reference to form login page
The above error is generated when a user bookmarks the login page on
an application server where container managed security is used.
Does anyone have an elegant way of dealing with this error?
Putting a note on the login page saying,
Try deleting the Tomcat work directory.
--- Becky Norum [EMAIL PROTECTED] wrote:
I've been beating my head against this problem for the last two
hours;
I'm hoping someone here can point me in the right direction.
I have created a custom tag in the class CheckOwnerTag .
I have defined the
Mark,
Do you have experience with security filter? Have you examined the
source code?
I went to SourceForge to get the download. There was a JAR but no
source except for a limited implementation class.
I would not want to implement a security filter without seeing the
source.
Can anyone tell
I would suggest option 1, with a slight variation.
I think it is best to keep action classes as lean as possible.
Rather than doing any heavy lifting in an action class it is better
to make calls to delegates and other helper classes. The modular
nature of the code enhances code reuse and
Could someone please provide a simple example showing the use of
nested:link with multiple parameters?
According to the documentation: This tag is an extension of the
html:link tag. Please consult its documentation for information on
tag attributes and usage details.
According to one book on
Has anyone else noted any problems with Struts and Resin 2.19?
__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For
We are running Struts under Resin with IIS on the front end.
Any type of get request processes fine.
However, post requests generate the error below.
Has anyone run into a similar problem?
Thanks.
Mike
HTTP Error 405
405 Method Not Allowed
The method specified in the Request Line is not
I am pre-populating a form with information from a data base.
Is the following procedure acceptable, or is there another procedure
that would be considered a Best Practice?
Instantiate the form bean in the action class.
Instantiate one or more DAO objects in the action class.
Call methods in
and the Action class from the
structure
of the DAOs and the back-end sysems.
Given all this, I like the first approach above the best.
FWIW -
Kevin
Mike Duffy [EMAIL PROTECTED] on 05/03/2002 11:50:37 AM
Please respond to Struts Users Mailing List
[EMAIL PROTECTED
Also,
You might find the following links useful:
http://java.sun.com/blueprints
http://java.sun.com/blueprints/code/jps13/src/index.html
Mike
--- Rick Reumann [EMAIL PROTECTED] wrote:
Thanks all for your responses to this topic. I have been trying to
find more concrete examples of using
sample does exactly above.
Mike Duffy wrote:
Vic,
Please take a few moments to review the following, I would value
your
opinion before I send it to the Struts user group.
Thanks in advance for your time and insight.
Mike
What are your thoughts on sending a redirect directly from an Action
class:
response.sendRedirect(/somePage.jsp?);
return null;
There is a setRedirect(boolean redirect) in the ActionForward class
that could be used for the same purpose (with a few extra lines of
code and an entry in the
I did not try to run the example specifically; however, I've built
some applications based on the Monkey Tree source and I will say that
nested tags are very elegant, very cool.
It does work.
If you have a speciffic question, the guy who wrote the nested tags
code, Arron Bates, is very good
Does anyone have a recommendation for a good JSTL book?
__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For
I think that Struts and the MVC architecture could be used to create
a basic workflow system.
A WorkflowState object would represent the state of items in the
workflow (current assignment, current status, and other attributes).
A WorkflowRights object would represent a user's right to view or
and not a combination of logic decided in the
JSP (if a user is in X role AND the status is Y, etc.).
Mike
--- Mike Duffy [EMAIL PROTECTED] wrote:
I think that Struts and the MVC architecture could be used to
create
a basic workflow system.
A WorkflowState object would represent the state of items
I am just starting to explore JSTL.
I can see how JSTL will replace the Struts logic tags, but what about
the Struts html tags?
Will Struts html tags be used along with JSTL?
A map can be used with JSTL to create the select options for a drop
down list. Will the select tag itself reamin an
There was a discussion in this list last week about Struts tags
eventually being replaced by JSTL.
I admit that I am a little confused about how things will progress.
Will the Struts-EL continued to be supported?
Mike
--- Wendy Smoak [EMAIL PROTECTED] wrote:
Mike wrote:
A map can be used
Craig,
Good information.
Thanks for being so responsive to the questions raised in this list.
Mike
--- Craig R. McClanahan [EMAIL PROTECTED] wrote:
On Thu, 17 Jul 2003, Mike Duffy wrote:
Date: Thu, 17 Jul 2003 13:18:52 -0700 (PDT)
From: Mike Duffy [EMAIL PROTECTED]
Reply
The struts-example\registration.jsp contains the following code:
html:link page=/editSubscription.do?action=Create paramId=username
paramName=registrationForm paramProperty=username
bean:message key=registration.addSubscription/
/html:link
Switching this to an html-el:link tag is easy.
I agree with the points David makes below.
Eclipse Rocks. And with the plugin framework, it is getting better all the time.
I run Eclipse on Windows XP at work and on Linux 9.0 at home. No problems.
Mike
--- Hibbs, David [EMAIL PROTECTED] wrote:
a) Boot time : I haven't met a Java-based
I think that Hibernate and iBATIS were probably created in reaction to the
inefficiencies and
complexities of EJB 1.1. In terms of efficiency, EJB 2.0 is a significant improvement
over EJB
1.1. In terms of complexity, XDoclet offers an elegant approach to coding EJBs
is that within a year there will be a completely
decoupled fine
grained persistence service within EJB. Perhaps there will be some sort of byte code
enhancement for entity beans. :(
Mike
--- Ted Husted [EMAIL PROTECTED] wrote:
Mike Duffy wrote:
In the short term, a non-standard solution may
Example:
A data entry tech request a customer profile.
The system gets a CustomerProfile business model object from the data access layer.
The CustomerProfile business model is debriefed into a CutomerProfileForm ActionForm
object.
The values from the CutomerProfileForm are displayed in
Thank you Harm.
I agree with your assessment of JBoss. JBoss is also a great value (although I think
they should
charge some nominal fee to insure the viability of their organization; see Alan
Williamson's
August editorial in JDJ). :)
Under what circumstances would you recommend the use of
SecurityFilter works great, without those annoying container managed security
limitations!
http://securityfilter.sourceforge.net/
SecurityFilter is a Java Servlet Filter that mimics container managed security. It
looks just like
container managed security to your app, as you can call
Does anyone know if SecurityFilter supports encrypted passwords for a DB realm, or
must passwords
be stored in plain text?
http://securityfilter.sourceforge.net/
Thanks!
Mike
__
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
Tomcat has exceptionally clear documentation in this area:
http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jndi-datasource-examples-howto.html
Mike
--- Craig R. McClanahan [EMAIL PROTECTED] wrote:
Quoting Edgar P Dollin [EMAIL PROTECTED]:
I like struts managed db pools, however, the
I recommend you drop the Struts logic tags and switch to JSTL combined with the
Struts-el tags.
JSTL has support for common, structural tasks such as iteration and conditionals,
tags for
manipulating XML documents, internationalization and locale-sensitive formatting tags,
and SQL
tags. It
I am having a difficult time finding a definitive Best Practices for handling SQL
exceptions in
a web application.
I would like to gain from the experience of users on this list.
For relatively simple web applications do you think it is acceptable to simply wrap
SQL exceptions
as Runtime
After some further research I was able to answer my own question. The answer was yes.
Best Practices for Exception Handling
http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html
--- Mike Duffy [EMAIL PROTECTED] wrote:
I am having a difficult time finding a definitive Best Practices
IMHO: Using the Struts HTML-EL tags with JSTL is the best way to go. The Struts
Logic tags are
not as funtional as JSTL.
Mike
--- Derek Clarkson [EMAIL PROTECTED] wrote:
Hi all,
My boss doesn't want to use Struts EL because as he puts it it's not part of
the main development and
the latest generation of leading
edge tools.
Mike Duffy
Austin, TX
__
Do you Yahoo!?
Yahoo! Hotjobs: Enter the Signing Bonus Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
I think it is best to limit the number of exceptions thrown.
Best Practices for Exception Handling
http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html
Mike
--- Robert Taylor [EMAIL PROTECTED] wrote:
H. When I cut and paste the url (both lines because it was split in the
email
Has anyone found a good Eclipse plugin for editing JSPs containing JSTL?
Thanks.
Mike
__
Do you Yahoo!?
Yahoo! Hotjobs: Enter the Signing Bonus Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
Robert,
DevProxy is a great program for monitoring the request and response headers:
http://www.widgetbuilders.com/
I recently did some socket programming. DevProxy was an invaluable tool. You can see
exactly
what flows through the socket between browser and host. Very good GUI interface.
Has anyone tried implementing the CachedRowSet for displaying data in tables on a web
page? If
so, please pass on the benefit of your experience.
I'd be interested if anyone has a great way for displaying hundreds of rows of data
from an RDBMS
on a web page. It would be great if there was an
Does anyone have any great ideas on creating customizable workflows in Struts?
__
Do you Yahoo!?
Get better spam protection with Yahoo! Mail.
http://antispam.yahoo.com/tools
-
To unsubscribe,
I'm trying to convert an application from Struts display tags to JSTL (still using
Struts as the
MVC).
I am having some difficulty converting nested tags to JSTL.
Can anyone offer any guidance?
Thanks.
Mike
__
Do you Yahoo!?
Yahoo! Finance Tax Center - File
=${form.some.nestedProperty}/
robert
-Original Message-
From: Mike Duffy [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 25, 2004 4:46 PM
To: Struts Users Mailing List
Subject: Using JSTL Instead of Nested Tags
I'm trying to convert an application from Struts display tags to JSTL
44 matches
Mail list logo
