Hello
On Jan 30, 2006, at 7:17 AM, Alan Comeau wrote:
You need to subclass the request processor and override the
processRoles
method, which by default does nothing.
That's Wrong. By default (1.2), this method is defined in
org.apache.struts.action.RequestProcessor. And checks roles against
the HTTPRequest's default isUserInRole method. The default behaviour
follows. If the user has at least one authorized role then struts
will grant access to the action.
Regards
Marcelo Morales
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]