Re: Basic security problem

2010-04-16 Thread Juan Chung
wrote: Hello struts users I have a really basic security problem and i would like to know what is the best practice to resolve it. I have an application with an authentification system and diffrent rights for diffrent type of user. To add or remove a link/fonctionnality, we simply declarate the

Re: Basic security problem

2010-04-16 Thread Dale Newfield
Hand-rolled security almost always has many holes. I would suggest using spring security. Cimballi wrote: One way to do it it to have a super action with a permission property, and you set the permission property with a static param in your struts xml files using the StaticParameters intercepto

RE: Basic security problem

2010-04-16 Thread adam pinder
> From: cosm...@gmail.com > Date: Fri, 16 Apr 2010 11:28:05 +0800 > Subject: Re: Basic security problem > To: user@struts.apache.org; cimba...@cimballi.net > > Thank you for answers. > > Your method looks good Cimbali. But do you think it would be really better > th

Re: Basic security problem

2010-04-15 Thread Stephane Cosmeur
erceptor interceptor to your stack on > all protected actions. > > Cimballi > > > On Thu, Apr 15, 2010 at 9:39 PM, Kun Niu wrote: > > You should check the authentication all by yourself in your action. > > > > Stephane Cosmeur wrote: > >> > >> H

Re: Basic security problem

2010-04-15 Thread Cimballi
by yourself in your action. > > Stephane Cosmeur wrote: >> >> Hello struts users >> >> I have a really basic security problem and i would like to know what is >> the >> best practice to resolve it. >> >> I have an application with an authentificatio

Re: Basic security problem

2010-04-15 Thread Kun Niu
You should check the authentication all by yourself in your action. Stephane Cosmeur wrote: Hello struts users I have a really basic security problem and i would like to know what is the best practice to resolve it. I have an application with an authentification system and diffrent rights for

Basic security problem

2010-04-15 Thread Stephane Cosmeur
Hello struts users I have a really basic security problem and i would like to know what is the best practice to resolve it. I have an application with an authentification system and diffrent rights for diffrent type of user. To add or remove a link/fonctionnality, we simply declarate the element