I'm writing an "Update Account" page where a user can set his email  
address and password, among other things. The first thing I tried was  
a @Before method that pulled in the current user and assigned it to  
the "account" field, hoping it happened before "account.email",  
"account.firstName", etc were applied. No such luck.

The next thing I thought about trying was a nice type converter for  
all accounts. A hidden ID of could be used to specify the "account"  
parameter as a the current user's ID.

This works but is very insecure. The simplistic way to handle this is  
to simply check the account ID against the current user ID before  
allowing anything to go further in my action bean. This works fine,  
but I'd really love to not have to specify the ID at all in my form.  
Rather, wouldn't it be nice if my type converter understood a value  
of "currentUser" and pulled that in? I had hoped it could work, but  
the TypeConverter interface doesn't supply the ActionBeanContext.

So, two questions:

1) Is the hidden ID + ID check the common way to do this in stripes?
2) Why can't the TypeConverter get the ActionBeanContext?

Patrick Lightbody
Autoriginate, Inc.
503-488-5402
http://www.autoriginate.com
[EMAIL PROTECTED]

"Intelligent testing made convenient"



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development

Reply via email to