Re: using struts with filters

[Sean Radford]

Have you looked at securityfilter?

(a project on sourceforge)


On Tue, 2003-09-16 at 22:15, David Erickson wrote:
> Check this link:
> http://www-106.ibm.com/developerworks/java/library/j-tomcat/
> 
> We parse the requested url to get the action name.. then perform matching on
> the logged in user to see if he has permission to that action or whatever
> resource it may be.
> -David
> 
> - Original Message - 
> From: "as as" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, September 16, 2003 11:59 AM
> Subject: using struts with filters
> 
> 
> > Hi,
> >
> > I am trying to use filters for login authentication using Jakarta struts
> framework with Tomcat. Has anyone done this earlier...any helpful
> tutorial/pointers/website...
> >
> > Thanks,
> > Samy
> >
> >
> > -
> > Do you Yahoo!?
> > Yahoo! SiteBuilder - Free, easy-to-use web site design software
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
-- 
Dr. Sean Radford, MBBS, MSc
<[EMAIL PROTECTED]>
http://bladesys.demon.co.uk/
Blade Systems


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: using struts with filters

[David Erickson]

Check this link:
http://www-106.ibm.com/developerworks/java/library/j-tomcat/

We parse the requested url to get the action name.. then perform matching on
the logged in user to see if he has permission to that action or whatever
resource it may be.
-David

- Original Message - 
From: "as as" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 16, 2003 11:59 AM
Subject: using struts with filters


> Hi,
>
> I am trying to use filters for login authentication using Jakarta struts
framework with Tomcat. Has anyone done this earlier...any helpful
tutorial/pointers/website...
>
> Thanks,
> Samy
>
>
> -
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

using struts with filters

[as as]

Hi,
 
I am trying to use filters for login authentication using Jakarta struts framework 
with Tomcat. Has anyone done this earlier...any helpful tutorial/pointers/website...
 
Thanks,
Samy


-
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software

RE: Using Struts with filters

[Daniel Steinberg]

I guess I can answer my own question.  I do not need override
ActionServlet.initOther() to attach the ActionForwards object to the servlet
context, because Struts does it already as Action.FORWARDS_KEY.

-Original Message-
From: Daniel Steinberg [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 13, 2002 4:25 PM
To: '[EMAIL PROTECTED]'
Subject: Using Struts with filters


I would like to put my authorization logic in a servlet filter.  If
authorization fails, I would like to display an error page by forwarding to
a JSP.  I would like to look up this JSP name just as I would while
performing a Struts action.  

Unfortunately, the forward mappings (ActionForwards) are attached to the
ActionServlet, and the filter knows nothing about the servlet.  It seems
that my best bet at this point is to override ActionServlet.initOther() and
attach the ActionForwards object to the servlet context.  My filter
(assuming that the servlet has already been loaded) can then get the servlet
context from the filter config and can get the ActionForwards from there.

Does anyone have any better ideas?  Would it make sense, in a future of
revision of Struts, to attach automatically attach all of the configuration
information to the servlet context, so that it will be available to filters
and listeners?

--
To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Re: Using Struts with filters

[@Basebeans.com]

Subject: Re: Using Struts with filters
From: Vic Cekvenich <[EMAIL PROTECTED]>
 ===
Follow J2EE JAS Container based security is an alternative.

Daniel Steinberg wrote:

> I would like to put my authorization logic in a servlet filter.  If
> authorization fails, I would like to display an error page by forwarding to
> a JSP.  I would like to look up this JSP name just as I would while
> performing a Struts action.  
> 
> Unfortunately, the forward mappings (ActionForwards) are attached to the
> ActionServlet, and the filter knows nothing about the servlet.  It seems
> that my best bet at this point is to override ActionServlet.initOther() and
> attach the ActionForwards object to the servlet context.  My filter
> (assuming that the servlet has already been loaded) can then get the servlet
> context from the filter config and can get the ActionForwards from there.
> 
> Does anyone have any better ideas?  Would it make sense, in a future of
> revision of Struts, to attach automatically attach all of the configuration
> information to the servlet context, so that it will be available to filters
> and listeners?
> 
> --
> To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
> 


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Using Struts with filters

[Daniel Steinberg]

I would like to put my authorization logic in a servlet filter.  If
authorization fails, I would like to display an error page by forwarding to
a JSP.  I would like to look up this JSP name just as I would while
performing a Struts action.  

Unfortunately, the forward mappings (ActionForwards) are attached to the
ActionServlet, and the filter knows nothing about the servlet.  It seems
that my best bet at this point is to override ActionServlet.initOther() and
attach the ActionForwards object to the servlet context.  My filter
(assuming that the servlet has already been loaded) can then get the servlet
context from the filter config and can get the ActionForwards from there.

Does anyone have any better ideas?  Would it make sense, in a future of
revision of Struts, to attach automatically attach all of the configuration
information to the servlet context, so that it will be available to filters
and listeners?

--
To unsubscribe, e-mail:   
For additional commands, e-mail: