>From a database?  Pow2ACL.
http://pow2acl.sourceforge.net

-----Original Message-----
From: javen fang [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 24, 2004 9:41 PM
To: Struts Users Mailing List
Subject: Re: How to implements Role Based Access Control in Struts ?


Thank you, bill.

I have seen the SecurityFilter project. It seems that
it is replacer to Container Management Security, and
it is based securityfilter-config.xml file. But I need
to obtain roles information from database, my customer
can insert a role, and determine which permission the
role has.

thanks all the same.

Can you give me another advice? 

 - javen fang

--- Bill Siggelkow <[EMAIL PROTECTED]> wrote:
> If container-managed security is to limiting for you
> but you still want 
> to use the <logic:present role="..."> tag then you
> might want to look 
> into SecurityFilter
> (http://securityfilter.sourceforge.net). There are a
> 
> lot of pros and cons when choosing a security
> mechanism. SecurityFilter 
> allows many conveniences offered by
> container-managed security (like 
> being able to use "request.isUserInRole(...)" etc.
> yet still allow a 
> custom solution.
> 
> <shameless-plug>
> I provided the initial draft for the Struts Security
> chapter of Struts: 
> The Complete Reference (Osborne) by James Holmes. I
> cover a lot of these 
>    details in this chapter.
> </shameless-plug>
> 
> Let me know if you have more specific questions: I
> will be glad to help :)
> 
> Bill Siggelkow
> 
> javen fang wrote:
> 
> > Hi , all:
> > 
> > I have queried this mailing list, and I get some
> > discusses about RBAC ( Role Based Access Control )
> in
> > struts. I understand that <logic:present
> role="...">
> > in JSP page and "role" attribute in ActionMapping
> are
> > all prepared with Container Management Access
> Control,
> > etc, JDBCRealm.
> > 
> > But it seems that what I need is not Container
> > Management Access Control,because CMAC is
> configured
> > in config file(etc, server.xml,web.xml) , but I
> want
> > to let customer config user roles in dynamic
> way,and
> > the user roles infomation is read from database. 
> > 
> > So,how can I implements RBAC with struts. can you
> give
> > me some advice?
> > 
> > thanks, javen
> > 
> > 
> >             
> > __________________________________
> > Do you Yahoo!?
> > Yahoo! Mail - 50x more storage than other
> providers!
> > http://promotions.yahoo.com/new_mail
> 
> 
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 



                
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to