> -----Original Message-----
> From: Erik Weber [mailto:[EMAIL PROTECTED]
> Sent: Thursday, July 22, 2004 11:43 AM
> To: Struts Users Mailing List
> Subject: Re: Tag question (JSP organization)
> 
> 
> Sure, Raghuram.
> 
> Caution: long post!

<snip what="guts of really good article on url arranging"/>

> 
> 
> Finally, restricting access to *.jsp in your web-resource-collection 
> element of web.xml can force your users to use the controller 
> Servlet-relative action URIs and prevent them from accessing 
> JSPs directly.

I usually assign a role of Developer to the *.jsp collection, that way I can access 
them directly for debugging purposes, even when they're on the production box.  It's 
one of those you might use it once a year, but boy is it nice to have category.

> 
> Also, I solved the problem that led to this post by putting an 
> init-param in web.xml called "controllerPath". I set its value as an 
> application scope attribute in a plug-in class. Now I can create 
> controller-relative hyperlinks like this, using the JSTL-like tags:
> 
> <html:link page="${controllerPath}/vendor/home">home</html:link>
> 
> If someone wants to use extension mapping, I just set 
> controllerPath to 
> be the empty String.
> 
> Now, what I want to know is, what flies out the window when I 
> decide to 
> learn JSF? I'm afraid to look. ;) 

JSF is essentially JSP, just a lot of tags you wish you had now, so it will still work.
The fly that I see is security.  Everytime you change your controller servlet mapping, 
you would have to change these mappings.  You could do */actor/*, however another 
servlet might be able to be tricked into providing access to the forbidden path.  It's 
a minor nit of course... but hey you asked :)

> By the time I learn JSF, 
> someone will 
> have developed a "CRUD IDE" that builds your entire app in 
> five minutes, 
> based on actor names and a CSS stylesheet. In a few years, we 
> will have 
> highly-paid "stack trace" experts. The average "corporate developer" 
> will see a stack trace and run for the hills, having always 
> thought they 
> were a myth. The manager will have to call in a stack trace 
> expert, who 
> will, at the rate of $700 per hour, begin to explain to all the 
> remaining developers what a "stack" is . . .

The problem would be what?  That we would be making to much money?

> 
> But seriously, hope this helps a newbie or two. Criticism is 
> always welcome!
> 
> Erik
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to