Hello

On Jan 30, 2006, at 7:17 AM, Alan Comeau wrote:

You need to subclass the request processor and override the processRoles
method, which by default does nothing.


That's Wrong. By default (1.2), this method is defined in org.apache.struts.action.RequestProcessor. And checks roles against the HTTPRequest's default isUserInRole method. The default behaviour follows. If the user has at least one authorized role then struts will grant access to the action.

Regards

Marcelo Morales

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to