ist
cc
Subject
Re: How to disallow opening a page directly from URL
What I want is to implement a security policy where all pages of the
application can only be accessed through the login page. i.e. If the
user logs in the application and copies the url in another browser and
tries to acce
or you can override the processRoles or processPreprocess method in your
request processor and send a redirect from there.
Gareth
Mark Shifman wrote:
You can also define a filter that directs all actions to Logon.do when
1) the logon bean is not present in the session.
This way you don't have
You can also define a filter that directs all actions to Logon.do when
1) the logon bean is not present in the session.
This way you don't have to garbage up you actions by always checking for
the logon bean.
mas
Bart Busschots wrote:
A simple solution would be to set up your login action so i
A simple solution would be to set up your login action so it sets a
variable of some sort in session scope to indicate that the user is
logged in and then have each action check that variable in session and
redirect to the login action if it is not present.
Bart.
Pankaj Gupta wrote:
What I wa
What I want is to implement a security policy where all pages of the
application can only be accessed through the login page. i.e. If the
user logs in the application and copies the url in another browser and
tries to access that page, he should be redirected to the login page.
Any suggestion?
Paul Benedict schrieb:
Panak, how are the menu items going to communicate to your
application which item was selected? Obviously, by incoking
an Action; if the menu items can invoke the Action, so can a user.
There is no such thing as security in this case.
Just a thought, but probably the Act
Put your JSPs unde WEB-INF and forward to the JSP in struts-config.xml:
http://www.onjava.com/pub/a/onjava/2002/10/30/jakarta.html?page=3
For roles, use declarative roles:
http://wiki.apache.org/struts/ApplicationSecurity
http://www.onjava.com/pub/a/onjava/2004/02/18/strutssecurity.html
-ed
On
Panak, how are the menu items going to communicate to your
application which item was selected? Obviously, by incoking
an Action; if the menu items can invoke the Action, so can a user.
There is no such thing as security in this case.
However, if you're asking if you can prevent the JSP files
from
Hi All,
I am new to struts and have a basic question. I am making an application
and I want that all the pages should be accessed through the menu items
only.i.e. if a user copies the url in the browser the page should not
get loaded. How can I enforce such a security?
Another question is ho
9 matches
Mail list logo