Paul-J Woodward wrote:
Hmm nasty, thinking quickly, I'd guess you have three options:
1. pass the username to the form (dangerous as it's easy to hack)
2. don't display fields the user can't set (again easy to hack)
3. have two copies of the form, one in a session, one in the request. On
From: Arne Brutschy [mailto:[EMAIL PROTECTED]
Is there any possibility to get a session variable in the
bean? I need to get the current user the bean is associated with. Or I
just set a
variable inside the bean when I'm prepopulating the form..
Any comments?
The Form bean is just a
http://jakarta.apache.org/struts/api/org/apache/struts/validator/DynaValidatorForm.html
The validate method has a request parameter, so I assume you just do
request.getSession().getAttribute(...), or I have I misread what you are
trying to achieve?
Paul
Paul-J Woodward wrote:
The validate method has a request parameter, so I assume you just do
request.getSession().getAttribute(...), or I have I misread what you are
trying to achieve?
Yes, that is true. But that needs the form to be validated to check the
access, too. I want to allow/deny a
Bank [/]
Arne Brutschy [EMAIL PROTECTED]
17/02/2004 17:28
Please respond to Struts Users Mailing List
To: Struts Users Mailing List [EMAIL PROTECTED]
cc:
Subject:Re: Subclassing DynaValidatorForm
5 matches
Mail list logo
