struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Zeltser <Mark.Zelt...@morganstanley.com>
Subject Re: Actions based on Role
Date Thu, 27 Mar 2003 23:01:54 GMT
Why do you want to have your own authentication system?

Mark.

"Jagadeesan,Sivakumar" wrote:

> I guess I have to do that way
> So I have manually chk every time whether that user is authorized to access
> this Action, rather then having it in struts-config.xml which is more
> configurable
>
> -----Original Message-----
> From: Edgar Dollin [mailto:Edgar@BLUE-MOOSE.NET]
> Sent: Thursday, March 27, 2003 4:55 PM
> To: 'Struts Users Mailing List'
> Subject: RE: Actions based on Role
>
> If you use a filter, to filter actions based on role, the action wouldn't
> have to know about security.  If your authentication sticks the user
> information into the session, the action could make decisions based on the
> user information.
>
> Edgar
>
> > -----Original Message-----
> > From: Jagadeesan,Sivakumar
> > [mailto:sivakumar.jagadeesan@dhs.state.tx.us]
> > Sent: Thursday, March 27, 2003 3:50 PM
> > To: 'Struts Users Mailing List'
> > Subject: Actions based on Role
> >
> >
> > I have web application where users could of three types (Roles)
> >
> > 1) Basic User
> > 2) Silver User
> > 3) Gold User
> >
> > According to Type / Role of user some actions could be
> > performed or not performed.
> >
> > I could set in my stuts-config.xml, the role based access in
> > Action Element
> >
> > I am having my own authentication System that uses the
> > database . The User table has the userName and also the Role.
> >
> > I am not sure how could I create a Role that the Action is
> > expecting , if I am using my own authentication
> >
> > Thanx
> > --Siva Jagadeesan
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-user-help@jakarta.apache.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-user-help@jakarta.apache.org

--
NOTICE: If received in error, please destroy and notify sender.  Sender does
not waive confidentiality or privilege, and use is prohibited.



---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org


Mime
View raw message