Martin Cooper wrote:
>>-----Original Message-----
>>From: Eddie Bush [mailto:[EMAIL PROTECTED]]
>>Sent: Friday, September 27, 2002 4:41 PM
>>To: Struts Users Mailing List
>>Subject: Re: taglib url problem
>>
>>
>>Not to be rude, but this would be a question for
>>[EMAIL PROTECTED] to answer. You might get
>>lucky and hit
>>on someone here that can tell you ... personally, I never put pages
>>under WEB-INF - that's one practice I question.
>>
>
>Just curious - why do you question it/dislike it?
>
>--
>Martin Cooper
>
It just *feels* wrong :-/ There are times when doing things that way is
necessary (you have subscriptions to certain material, perhaps) - I can
see that. I just really think you could just as easily protect that
information by a security constraint... and do without all the
"hooplah". Isn't it just added complexity?
"But I don't want to add a security constraint and I want to be sure
people can only access my pages through actions!"
So ... always use actions? Tuck your files under something else -
/pages or
/nobodygonnagetmyfileswithoutgoingthroughanactionfirstdamnit_cuzthatsuncool
Wouldn't that be less complicated and have the same effect? I
continually feel like I'm missing the point wrt this, to be honest. As
I said, it just *feels* wrong.
--
Eddie Bush
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>