Hello Venkat,
The usual way of protecting JSPs from direct access is to place them in
a folder under /WEB-INF. This way, only ForwardResolutions can access them.
If you need a finer security management, you could use a custom security
tag. A good example exists in the Stripes wiki:
http://www.stripesframework.org/display/stripes/Security+Interceptor+for+custom+authorization
Kind regards,
Marcus
Am 12.02.2013 00:49, schrieb Venkat Ravuri:
> I tried to implement security Interceptor by implementing Interceptor
> interface. It works well for the action beans , just fine.
> Now how do I make sure my JSP go through that interceptor, if I
> directly access them.
>
> Lets say I want to access localhost/myapp/app.jsp directly, I want my
> interceptor to kick-in between and reject direct access to this page.
> I want to make sure user don't access the JSP directly. How do I do it?.
>
>
> <filter-mapping>
> <filter-name>StripesFilter</filter-name>
> <url-pattern>*.jsp</url-pattern>
> <dispatcher>REQUEST</dispatcher>
> </filter-mapping>
>
> <init-param>
> <param-name>ActionResolver.Packages</param-name>
>
> <param-value>com.myapp.Registration,/WEB-INF/classes</param-value>
> <!--
> <param-value>com.myapp.Registration,/WEB-INF/classes</param-value>-->
> </init-param>
>
>
>
>
> I have already configured Stripes Filter and have action beans
> configured for these JSP pages, even then my interceptor doesn't kick-in.
>
> How do I address this issue?.
>
> Thanks,
> Venkat
>
>
> ------------------------------------------------------------------------------
> Free Next-Gen Firewall Hardware Offer
> Buy your Sophos next-gen firewall before the end March 2013
> and get the hardware for free! Learn more.
> http://p.sf.net/sfu/sophos-d2d-feb
>
>
> _______________________________________________
> Stripes-users mailing list
> Stripes-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/stripes-users
------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
Stripes-users mailing list
Stripes-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/stripes-users
