I know that Mike and the Atlassian guys are going to be releasing their security framework as opensource... It uses OSUser, I think, so it can plug into different servlet containers and add enhanced security features. Maybe we can hear from them when this will drop as opensource?
Jason > -----Original Message----- > From: Greinke, Ross [mailto:[EMAIL PROTECTED] > Sent: Friday, July 18, 2003 12:31 PM > To: [EMAIL PROTECTED] > Subject: RE: [OS-webwork] Pattern for ensuring a logged-in user > > > Hmmm... I guess I could do that, although I already have a > mini-authentication framework I've used on other projects. > Perhaps my question goes back to the generalized question of > ensuring a proper path into the application (independent of > login) so that session data is guaranteed from command action > to command action. > > To wit: > > --- from Orginal Message --- > As I type this message, I suppose this pattern could be > generalized to any scenario where someone tries to directly > browse to a page without going thru the normal application > logic to get there (where various session data is stored). > It's not sufficient to say that if a session variable is > null, then just make one and put it in the session. It's > most likely that the session data was stored in another > command class for the current one to use. > > Rossi > > -----Original Message----- > From: Sebastiano Pilla [mailto:[EMAIL PROTECTED] > Sent: Friday, July 18, 2003 9:24 AM > To: [EMAIL PROTECTED]; > [EMAIL PROTECTED] > Subject: Re: [OS-webwork] Pattern for ensuring a logged-in user > > > At 09.06 18/07/2003 -0500, Greinke, Ross wrote: > >Is there a simple WebWork pattern that helps to ensure that > a user has > >gone thru the normal login page? > > Not a WebWork specific thing, but what about the security constraints > offered by any servlet container? You configure those > constraints in the > > web.xml file of your webapp, along with the login configuration and > security roles needed by your application. > > IMHO you should start with those, then move to other, more specific > implementations if the default one proves to be insufficient > for your needs. > > Ing. Sebastiano Pilla, CTO > SDG Engineering s.r.l. > Via della Chiesa Campocroce 4 > 31021 Campocroce di Mogliano Veneto (TV) > Tel +39-041-5947721 > Fax +39-041-5947722 > > > > ------------------------------------------------------- > This SF.net email is sponsored by: VM Ware > With VMware you can run multiple operating systems on a > single machine. WITHOUT REBOOTING! Mix Linux / Windows / > Novell virtual machines at the same time. Free trial click > here: http://www.vmware.com/wl/offer/345/0 > _______________________________________________ > Opensymphony-webwork mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork > > > ------------------------------------------------------- > This SF.net email is sponsored by: VM Ware > With VMware you can run multiple operating systems on a > single machine. WITHOUT REBOOTING! Mix Linux / Windows / > Novell virtual machines at the same time. Free trial click > here: http://www.vmware.com/wl/offer/345/0 > _______________________________________________ > Opensymphony-webwork mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork > ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.com/wl/offer/345/0 _______________________________________________ Opensymphony-webwork mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/opensymphony-webwork
