Arash Bijanzadeh wrote:
I am searching for a way to set security-constraints for the webapp, I wonder is there a way to do it via xdoclet? writing everything in a xml file is error pron and time consuming.

As others have pointed out, you really want the bulk of your security constraints in a separate file that's merged into the generated files.


There's one notable exception. @struts.action allows you to specify a comma-separated list of roles that can invoke that action. This mixes the security model and code somewhat, but I think everyone agrees that it's *much* better to specify permitted roles in Xdoclet comments than to try to maintain code that explicitly calls request.isUserInRole(String) for each authorized role.



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
xdoclet-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/xdoclet-user

Reply via email to