Hello all,
I have an application in which a page (Main.jsp with no form) contains a
frameset and within that frame set i have two jsp's.
<Frameset cols="20%,*">
<frame src="go.jsp">
<frame src="enter.jsp">
</Frameset>
(these of course are simple names)
both go and enter have actionBeans and forms /Go.action and /Enter.action.
I have a login page that the user can go to and if successful i put their
credentials on session scope via my user created context that extends
ActionBeanContext (pretty much as described in best practices on page)
Here is the problem i have implemented a security layer as an interceptor that
checks if the user is null on my context and if user is null it sends to login
if not they go to Main.jsp which is go.jsp on the left with links that control
what displays on the right which is enter.jsp both controlled by their
respective action beans. The problem is that i can control anything on the
stripes page (aka checking if user is null and forcing to login via the
interceptor) but if the user types
http://localhost:8080/NAME_OF_CONTEXT/MainPage.jsp they can go there without
being forced to the login but as soon as they click a link on either side
controlled by (/Go.action or /Enter.action)aka stripes, the interceptor finds
there user as null and sends them to the login.
What can i do (Stripes solution or not... also i dont have control of the tomcat
im deployed to so no configuration) if they try to go to mainpage if not logged
in?? Thanks in advance.
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users
