Re: [OT] Athentication filter doesn't filter actions

2003-12-08 Thread Arne Brutschy
Ralf Rapude wrote:
I've checked it out before I post the solution and it works fine here.
(Tomcat 4.1.27).
AB> ideas. BTW, I'm using Tomcat 5 and 2.4 servlets..
So maybe it is a problem of using Tomcat 5 (isn't it still beta?).
Maybe you should download a stable version for another attempt.
Finally, I found the solution. I was really stupid - I included a 
general allow for all *.do URIs in my authFilter (for debug reasons)
and I forgot it... Argl.. Your mapping is now working properly.

Thanks,
Arne
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: [OT] Athentication filter doesn't filter actions

2003-12-05 Thread Ralf Rapude
Hello Arne,

AB>
AB>  authenticationFilter
AB>  /*
AB>
AB>
AB>  authenticationFilter
AB>  action
AB>

I've checked it out before I post the solution and it works fine here.
(Tomcat 4.1.27).

AB> ideas. BTW, I'm using Tomcat 5 and 2.4 servlets..
So maybe it is a problem of using Tomcat 5 (isn't it still beta?).
Maybe you should download a stable version for another attempt.

Regards
Ralf Rapude



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OT] Athentication filter doesn't filter actions

2003-12-05 Thread Arne Brutschy
Ralf Rapude wrote:
So you should better try this:

> [..]
>
I tried this:
  
authenticationFilter
/*
  
  
authenticationFilter
action
  
But I still can access my actions without authenticating. I'm out of 
ideas. BTW, I'm using Tomcat 5 and 2.4 servlets..

Regards,
Arne
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: [OT] Athentication filter doesn't filter actions

2003-12-05 Thread Ralf Rapude
>Why is this necessary?
>Isn't /*.do a subset of /* ???

Oops. I'm sorry because it is the same (it might be better to think
before writing).

So you should better try this:

 
CheckUser Authentication Filter

/jsps/closed/*
  
   
CheckUser Authentication Filter

action
  ^^
  


Regards
Ralf Rapude


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OT] Athentication filter doesn't filter actions

2003-12-05 Thread Arne Brutschy
Ralf Rapude wrote:
  /*
>
I already tried that, but this doesn't work, it's not even a valid 
filter mapping (Tomcat gets an Parse Error exception on this mapping).

Any ideas?

Arne

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: [OT] Athentication filter doesn't filter actions

2003-12-05 Thread Joe Hertz
Why is this necessary?

Isn't /*.do a subset of /* ???

> -Original Message-
> From: Ralf Rapude [mailto:[EMAIL PROTECTED] 
> Sent: Friday, December 05, 2003 6:28 AM
> To: Struts Users Mailing List
> Subject: Re: [OT] Athentication filter doesn't filter actions
> 
> 
> Hi,
> just repeat the  tag like:
> 
>
>   authenticationFilter
>   /*
> 
>  
>   authenticationFilter
>   /*.do
> 
> 
> Ralf Rapude
> 
> __
> 
> WEB.DE FreeMail wird 5 Jahre jung! Feiern Sie mit uns und 
> nutzen Sie die neuen Funktionen http://f.web.de/features/?mc=021130
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [OT] Athentication filter doesn't filter actions

2003-12-05 Thread Ralf Rapude
Hi,
just repeat the  tag like:

   
  authenticationFilter
  /*

 
  authenticationFilter
  /*.do


Ralf Rapude

__
WEB.DE FreeMail wird 5 Jahre jung! Feiern Sie mit uns und
nutzen Sie die neuen Funktionen http://f.web.de/features/?mc=021130


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[OT] Athentication filter doesn't filter actions

2003-12-05 Thread Arne Brutschy
Hi all,

I'm using an authentication filter to control the access to several .jsp 
pages. At the moment, I'm using the mapping

  
authenticationFilter
/*
  
to do this. But this doesn't filter any access to the actions itself, 
like something.do. Do I have to include my filter manually in all 
actions (i.e. calling the doFilter method)?

Regards,
Arne
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]