At 5:48 PM +0200 2002/07/08, J�rgen Weber wrote:
>Hello,
>
>I am into evaluating Struts.
>
>The struts-example.war does authentication for its users programmatically.
>
>Why doesn't it use container managed security?

I would assume simply because that's easier for an example.  There's
nothing preventing anyone from using container managed security for
Struts.

Do you see ways in which the Struts framework can do anything useful
to make it easier to implement container managed security?  I can
imagine perhaps having a SecureActionMapping subclass of
ActionMapping that might allow declarative access control based on a
user role or something -- but I haven't needed that kind of security
in an app yet, so I haven't really learned all the details.

If you need it, maybe you can build it, and then contribute it back
to the project?  That's how these things grow after all...

Joe

--
--
* Joe Germuska    { [EMAIL PROTECTED] }
"It's pitiful, sometimes, if they've got it bad. Their eyes get
glazed, they go white, their hands tremble.... As I watch them I
often feel that a dope peddler is a gentleman compared with the man
who sells records."
        --Sam Goody, 1956
tune in posse radio: <http://www.live365.com/stations/289268>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to