hi, You could use a login filter. Have the filter check if they are logged in via a session attribute. If the person is logged, then fine. Otherwise redirect to the login page. On logging in you set the session attribute. Now just set the web.xml so that everything has to go through the login filter *except* the login page.
mvg, Jasper On 6/12/06, Abhimanyu Koul <[EMAIL PROTECTED]> wrote:
hi all! i want to use session validation in my application. no user should be allowed to view any page without logging in. if any user say copies the action from the properties window into the address bar of the browser, he should be directed to the login page. no error message should be shown neither the user should be allowed to do some operations without logging in. can we use some feature of requestprocessor for that. what are the various methods to achieve that. regards Abhimanyu Koul FinEng Solutions (P) Ltd. Dani Compound, 158, Vidyanagari Marg, Kalina, Santacruz (East), Mumbai - 400 098 Mobile : +91 9819510090
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
