[OT] Re: How to disallow opening a page directly from URL

2006-05-18 Thread DGraham
ist cc Subject Re: How to disallow opening a page directly from URL What I want is to implement a security policy where all pages of the application can only be accessed through the login page. i.e. If the user logs in the application and copies the url in another browser and tries to acce

Re: How to disallow opening a page directly from URL

2006-05-18 Thread Gareth Evans
or you can override the processRoles or processPreprocess method in your request processor and send a redirect from there. Gareth Mark Shifman wrote: You can also define a filter that directs all actions to Logon.do when 1) the logon bean is not present in the session. This way you don't have

Re: How to disallow opening a page directly from URL

2006-05-18 Thread Mark Shifman
You can also define a filter that directs all actions to Logon.do when 1) the logon bean is not present in the session. This way you don't have to garbage up you actions by always checking for the logon bean. mas Bart Busschots wrote: A simple solution would be to set up your login action so i

Re: How to disallow opening a page directly from URL

2006-05-18 Thread Bart Busschots
A simple solution would be to set up your login action so it sets a variable of some sort in session scope to indicate that the user is logged in and then have each action check that variable in session and redirect to the login action if it is not present. Bart. Pankaj Gupta wrote: What I wa

Re: How to disallow opening a page directly from URL

2006-05-18 Thread Pankaj Gupta
What I want is to implement a security policy where all pages of the application can only be accessed through the login page. i.e. If the user logs in the application and copies the url in another browser and tries to access that page, he should be redirected to the login page. Any suggestion?

Re: How to disallow opening a page directly from URL

2006-05-17 Thread Christian Bollmeyer
Paul Benedict schrieb: Panak, how are the menu items going to communicate to your application which item was selected? Obviously, by incoking an Action; if the menu items can invoke the Action, so can a user. There is no such thing as security in this case. Just a thought, but probably the Act

Re: How to disallow opening a page directly from URL

2006-05-17 Thread Ed Griebel
Put your JSPs unde WEB-INF and forward to the JSP in struts-config.xml: http://www.onjava.com/pub/a/onjava/2002/10/30/jakarta.html?page=3 For roles, use declarative roles: http://wiki.apache.org/struts/ApplicationSecurity http://www.onjava.com/pub/a/onjava/2004/02/18/strutssecurity.html -ed On

Re: How to disallow opening a page directly from URL

2006-05-17 Thread Paul Benedict
Panak, how are the menu items going to communicate to your application which item was selected? Obviously, by incoking an Action; if the menu items can invoke the Action, so can a user. There is no such thing as security in this case. However, if you're asking if you can prevent the JSP files from

How to disallow opening a page directly from URL

2006-05-17 Thread Pankaj Gupta
Hi All, I am new to struts and have a basic question. I am making an application and I want that all the pages should be accessed through the menu items only.i.e. if a user copies the url in the browser the page should not get loaded. How can I enforce such a security? Another question is ho