Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Mohit Gupta
Thanks Ahmed. As you told its available in jsf,shiro .what about struts? On Sun, Dec 1, 2013 at 2:13 AM, Ahmed Khan wrote: > Try other frameworks like Apache Shiro. Also JSF has a builtin feature > where fields marked as disabled or read only are not transferred to and fom > the client. > > >

Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Ahmed Khan
Try other frameworks like Apache Shiro. Also JSF has a builtin feature where fields marked as disabled or read only are not transferred to and fom the client. On Sat, Nov 30, 2013 at 9:43 PM, Dave Newton wrote: > No, I think everyone understood. Struts is authorization-agnostic. > On Nov 30,

Re: How to install Struts?

2013-11-30 Thread umeshawasthi
War you downloaded is a sample application showing how we can use struts2 is a webapplication. To correct you struts2 is not a web application itself but yes made up on servlet tech to develop web applications. In download distribution you will find number of jars files which can be used to de

Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Dave Newton
No, I think everyone understood. Struts is authorization-agnostic. On Nov 30, 2013 2:17 PM, "Mohit Gupta" wrote: > Guys looks like i was not clear in my question earlier. My requirement is > something like this > > i make a call to struts 2 action which forwards the request to customer.jsp > whi

How to install Struts?

2013-11-30 Thread Jorge F. Hernandez
Hey guys, I've been looking for documentation on how to install it but I have not found it, all i found is how to start working with it, but nothing on how to install it, This is what I have: Apache 2.4 Tomcat 7 All I know is that Struts is made on Java technology, so I guess it should be

Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Mohit Gupta
Guys looks like i was not clear in my question earlier. My requirement is something like this i make a call to struts 2 action which forwards the request to customer.jsp which populates the fields from CustomerInfo.java (data object). Say CustomerInfo has a field customerId .Assume its value was 1

Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Paul Benedict
Mohit, feel free to check out Spring Security. It works with any framework to authenticate or authorize resources; it just becomes your responsibility to configure it correctly. On Sat, Nov 30, 2013 at 9:36 AM, Dave Newton wrote: > I don't see how it could, since there are an essentially unlimi

Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Dave Newton
I don't see how it could, since there are an essentially unlimited number of back ends, authorization mechanisms, etc that would need to be accounted for. Struts 2 is agnostic when it comes to basically everything but the web layer. On Nov 30, 2013 3:40 AM, "Mohit Gupta" wrote: > I agree its not

RE: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Martin Gainty
> Date: Sat, 30 Nov 2013 10:54:25 +0530 > Subject: Concealing primary key in web application with struts 2 from > security perspective? > From: motgu...@gmail.com > To: user@struts.apache.org > > When you have internet facing application , its important not to expose > direct object referen