the
> present user." That being said, does my solution look acceptable?
>
> James Bonaiuto
>
> -Original Message-
> From: Matthias Bauer [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 09, 2001 4:38 AM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED];
> [EMAIL PRO
-
From: Ted Husted [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 09, 2001 6:24 AM
To: [EMAIL PROTECTED]
Subject: Re: Struts 1.1 To-Do - Enhance role checking
I've posted this to More About Struts as a ZIP file with Mathias's
source code and the original post.
< http://www.husted.com
I've posted this to More About Struts as a ZIP file with Mathias's
source code and the original post.
< http://www.husted.com/about/struts/resources.htm#new >
Matthias Bauer wrote:
>
> Hi James, hi Craig
>
> I am not very happy with your approach, because it intermixes presentation with
> log
Hi James, hi Craig
I am not very happy with your approach, because it intermixes presentation with
logic. What you do is: You check in the JSP page whether a user is in a specific
role. But what you really want to do is to check if a user has the right
permissions BEFORE an action is executed.
On Wed, 27 Jun 2001, BONAIUTO,JAMES (HP-NewJersey,ex1) wrote:
> sorry, heres the example:
>
>
>
>
I assume this means you'd write the authorized message if
request.isUserInRole() returned true for any of the listed role
names? Likewise, the body of would be processed if
isUserInRol
sorry, heres the example:
James Bonaiuto
-Original Message-
From: BONAIUTO,JAMES (HP-NewJersey,ex1) [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 27, 2001 3:25 PM
To: [EMAIL PROTECTED]
Subject: Struts 1.1 To-Do - Enhance role checking
I would like to extend the and tags