Re: Checkling Security

2006-06-18 Thread Richard Yee
I'd suggest doing it in a filter or a base Action class. -Richard chamal desilva wrote: Hi, How should we test wether a user has permission for an action. Can we do it in action class or do we have to do it in EJB tier. Thanking You, Chamal. __

Re: Checkling Security

2006-06-18 Thread Paul Benedict
Struts action mappings also contain a role attribute. This role is checked against HttpServletRequest.isUserInRole. Adam Samere <[EMAIL PROTECTED]> wrote: You can use the standard Servlet authorization/authentication mechanism, or use a Servlet filter, or use a custom ActionMappings class or co

Re: Checkling Security

2006-06-18 Thread Adam Samere
You can use the standard Servlet authorization/authentication mechanism, or use a Servlet filter, or use a custom ActionMappings class or common base Action subclass if you're bent on handling it within Struts. -Adam chamal desilva wrote: Hi, How should we test wether a user has permission f

Checkling Security

2006-06-18 Thread chamal desilva
Hi, How should we test wether a user has permission for an action. Can we do it in action class or do we have to do it in EJB tier. Thanking You, Chamal. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail