> From: Joao Batistella [mailto:[EMAIL PROTECTED] 
> 1. Put an include or tag in every page that checks this
> 2. Check this in my struts action
> 3. Use a servlet filtering to filter all .jsp or .do requests
> I'm thinking about adopting solution number 3. Is it the best aproach?

Yes.  IMO 1 and 2 are way too late to be checking whether the user is
allowed to be there.

-- 
Wendy Smoak

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to