Re: Application based Security

2008-12-15 Thread Andy Law
t, some of them are wrong. There is no *single* 'right' way to do things though, that fits all situations. Hope that gives you some ideas. Later, Andy -- View this message in context: http://www.nabble.com/Application-based-Security-tp21010272p21014167.html Sent from the Struts - User mai

Re: Application based Security

2008-12-15 Thread Felipe Lorenz
> >> > Hi All, >> > >> > We are developing an application based on Struts2 framework. We are on >> way >> > to develop application based security so that the unauthorized user can >> > not >> > access the secure area,it needs the request to b

Re: Application based Security

2008-12-15 Thread shekher awasthi
truts2 framework. We are on > way > > to develop application based security so that the unauthorized user can > > not > > access the secure area,it needs the request to be from the authorized > > person.We can have the Below mentioed approach > > > &g

Re: Application based Security

2008-12-15 Thread Andy Law
Shekher wrote: > > Hi All, > > We are developing an application based on Struts2 framework. We are on way > to develop application based security so that the unauthorized user can > not > access the secure area,it needs the request to be from the authorized > pers

Re: Application based Security

2008-12-15 Thread shekher awasthi
UserAwareBaseAction { > > /** > * Since user is a session variable simply clear out the pertinent info > and > * the filter will force a new login. > */ > public String executeAction() throws Exception { >try { > this.getUser().setUsername(null); >}

RE: Application based Security

2008-12-15 Thread Fogleson, Allen
g the username to null makes sure the next request for a protected page fails. HTH Allen Fogleson -----Original Message- From: shekher awasthi [mailto:shekher.awas...@gmail.com] Sent: Monday, December 15, 2008 3:55 AM To: Struts Users Mailing List Subject: Application based Security Hi All,

Application based Security

2008-12-15 Thread shekher awasthi
Hi All, We are developing an application based on Struts2 framework. We are on way to develop application based security so that the unauthorized user can not access the secure area,it needs the request to be from the authorized person.We can have the Below mentioed approach 1) For Secure area