On Mon, 20 May 2002, Victor Hadianto wrote:
> Date: Mon, 20 May 2002 14:15:30 +1000
> From: Victor Hadianto <[EMAIL PROTECTED]>
> Reply-To: Struts Users Mailing List <[EMAIL PROTECTED]>,
> [EMAIL PROTECTED]
> To: Struts Users Mailing List <[EMAIL PROTECTED]>
> Subject: Re: Secure generic dispatcher ..
>
> I have posted this question last Friday and have no reply. Posted again
> hoping that someone who got an idea might missed my email last Friday.
>
> I will be eternally grateful for anyone who can suggest me a solution.
>
Container-managed security is only invoked on the original request, not on
RequestDispatcher calls -- it is assumed that, if your application
performs this call, then it must be satisfied that the user has the right
access privileges.
> Ta,
>
Craig
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>