RE: Best practice for protecting JSPs

2013-07-01 Thread Martin Gainty
favor..no altere ni interrumpir esta communicacion...Gracias > From: juntandolin...@gmail.com > To: user@struts.apache.org > Subject: Re: Best practice for protecting JSPs > Date: Mon, 1 Jul 2013 10:59:03 +0200 > > Filtering sounds good as well. > > Security seems to be

Re: Best practice for protecting JSPs

2013-07-01 Thread Antonio Sánchez
Oh!, ok, thanks! El Lunes, 1 de julio de 2013 11:05:01 Lukasz Lenart escribió: > 2013/7/1 Antonio Sánchez : > > What do you mean with 'fake' auth. constraints? > > > No access > JSP > > *.jsp > > > no-jsp-access-possib;e > > > > > Regards

Re: Best practice for protecting JSPs

2013-07-01 Thread Lukasz Lenart
2013/7/1 Antonio Sánchez : > What do you mean with 'fake' auth. constraints? No access JSP *.jsp no-jsp-access-possib;e Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ - To unsubscribe,

Re: Best practice for protecting JSPs

2013-07-01 Thread Antonio Sánchez
Filtering sounds good as well. Security seems to be a separate concern to struts because it must be mostly performed from the outside: web.xml, filtering, maybe Spring Security or other tools, etc... Anyway I have missed some guidance in the documentation: feature request? Also, I guess that

Re: Best practice for protecting JSPs

2013-07-01 Thread Antonio Sánchez
mation about what kind of protection you > want to have Sent from BlackBerry® on Airtel > > -Original Message- > From: Antonio Sánchez > Date: Mon, 01 Jul 2013 10:24:15 > To: > Reply-To: "Struts Users Mailing List" > Subject: Best practice for pro

Re: Best practice for protecting JSPs

2013-07-01 Thread Antonio Sánchez
What do you mean with 'fake' auth. constraints? El Lunes, 1 de julio de 2013 10:38:56 Lukasz Lenart escribió: > 2013/7/1 Antonio Sánchez : > > I need to protect JSPs. Some options: > > > > 1. Put JSPs under WEB-INF and, optionally, use the conventions plugin. > > > > 2. Declare authorization co

Re: Best practice for protecting JSPs

2013-07-01 Thread Antonios Gkogkakis
What we've done is to create a filter (implement javax.servlet.Filter and define it in web.xml ) and if the resource uri ends with .jsp we return an http 403 error. Antonios On 1 July 2013 09:38, Lukasz Lenart wrote: > 2013/7/1 Antonio Sánchez : > > I need to protect JSPs. Some options: > > >

Re: Best practice for protecting JSPs

2013-07-01 Thread Lukasz Lenart
2013/7/1 Antonio Sánchez : > I need to protect JSPs. Some options: > > 1. Put JSPs under WEB-INF and, optionally, use the conventions plugin. > > 2. Declare authorization constraints in web.xml. These two options are the best to avoid direct access to JSPs - not all containers block access to reso

Re: Best practice for protecting JSPs

2013-07-01 Thread umeshawasthi
-To: "Struts Users Mailing List" Subject: Best practice for protecting JSPs I need to protect JSPs. Some options: 1. Put JSPs under WEB-INF and, optionally, use the conventions plugin. 2. Declare authorization constraints in web.xml. 3. Use some external tool, perhaps Spring Security

Best practice for protecting JSPs

2013-07-01 Thread Antonio Sánchez
I need to protect JSPs. Some options: 1. Put JSPs under WEB-INF and, optionally, use the conventions plugin. 2. Declare authorization constraints in web.xml. 3. Use some external tool, perhaps Spring Security. 4. Some other options. Which is the best practice in Struts2? Thanks.

Re: [S1] Best practice to transfer control to next page (out of JVM)?

2013-05-07 Thread Dave Newton
t; %> > > does not fill the page with the HTML-content retrieve from the other > request > > > and writing directly on the Struts response : > response.getWriter().write(content); > > Any idea would be appreciated ... as it is basically copying an HTML > content from

Re: [S1] Best practice to transfer control to next page (out of JVM)?

2013-05-07 Thread Thomas Lionel SMETS (prof)
ng an HTML content from one to the other !!! \T, -- Subject: Re: [S1] Best practice to transfer control to next page (out of JVM)?

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-29 Thread bphill...@ku.edu
eters\...* and include in the tutorial text both options. Thanks for the help. -- View this message in context: http://struts.1045723.n5.nabble.com/Security-Vulnerability-When-Using-SessionAware-and-Best-Practice-For-Mitigating-It-tp5502292p5525787

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-29 Thread Łukasz Lenart
2012/2/28 bphill...@ku.edu : > Lukasz - I agree with you, but until a new version of Struts 2 is released > that includes a fix for this vulnerability, I'd like to tell Struts 2 > developers what to do when implementing the SessionAware interface to > mitigate the vulnerability. > > If you could lo

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-28 Thread bphill...@ku.edu
itial post and provide any feedback on that I'd certainly appreciate your comments. -- View this message in context: http://struts.1045723.n5.nabble.com/Security-Vulnerability-When-Using-SessionAware-and-Best-Practice-For-Mitigating-It-tp5502292p5523338.html Sent from the Struts - User mailing li

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-28 Thread Łukasz Lenart
I think we should simply implemented what was mentioned in WW-3631 to solve that potential vulnerability Kind regards -- Łukasz Mobile +48 606 323 122 Office +27 11 0838747 http://www.lenart.org.pl/ Warszawa JUG conference - Confitura http://confitura.pl/ ---

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-27 Thread bphill...@ku.edu
n-Using-SessionAware-and-Best-Practice-For-Mitigating-It-tp5502292p5519824.html Sent from the Struts - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional comm

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-27 Thread Greg Lindholm
were not always replicated to the other servers in the cluster. Using only immutable objects solved the problem then and It's saved me on a couple other issues since, hence I consider it a "best practice". On Mon, Feb 27, 2012 at 10:50 AM, Gabriel Belingueres wrote: > I don'

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-27 Thread Gabriel Belingueres
I don't know if storing only immutable state in session is a "Best Practice" (if there exists such a thing as a best practice). Consider frameworks like JBoss Seam or Spring Web Flow with their support for conversations, which is basically mutable state stored in session scope. Th

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-27 Thread Greg Lindholm
A Best Practice for the Session is to only store Immutable object in the session. This would eliminate the SessionAware issue plus it can also be important for clustered servers. On Tue, Feb 21, 2012 at 9:09 AM, bphill...@ku.edu wrote: > I was researching the SessionAware interface as

Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

2012-02-21 Thread bphill...@ku.edu
ementing the SessionAware interface and how to mitigate the security vulnerability. Thank You, Bruce Phillips -- View this message in context: http://struts.1045723.n5.nabble.com/Security-Vulnerability-When-Using-SessionAware-and-Best-Practice-For-Mitigating-It-tp5502292p5502292.html Sent

Re: strust2: filter-mapping best practice - /*

2009-11-03 Thread José Santos
53 > To: Struts Users Mailing List > Subject: Re: strust2: filter-mapping best practice - > /* > > I have a number of servlets in the same web app so to make it work I > have > restrict the filter mapping as follows. > > >struts2 >*.action > >

Re:strust2: filter-mapping best practice - /*

2009-11-02 Thread arne . johnsson
Hi I am using Struts 2 together with jfreechart and displaytag, to get this working I could not use /* , to get it working I have to modify the mapping to use responseOverrideFilter *.action responseOverrideFilter *.jsp Best regards Arne Johnsson

RE: strust2: filter-mapping best practice - /*

2009-11-02 Thread James Cook
ssage- From: Greg Lindholm [mailto:greg.lindh...@gmail.com] Sent: 02 November 2009 15:53 To: Struts Users Mailing List Subject: Re: strust2: filter-mapping best practice - /* I have a number of servlets in the same web app so to make it work I have restrict the filter mapping as fo

Re: strust2: filter-mapping best practice - /*

2009-11-02 Thread Greg Lindholm
one was suggested on this mailing list since there are resources that struts UI controls can request. On Sun, Nov 1, 2009 at 9:38 AM, Graham Leggett wrote: > Hi all, > > I am trying to develop a struts2 app, and I am struggling to find a > reference that explains the thinking and/or b

strust2: filter-mapping best practice - /*

2009-11-01 Thread Graham Leggett
Hi all, I am trying to develop a struts2 app, and I am struggling to find a reference that explains the thinking and/or best practice behind the url-pattern in web.xml. Google uncovers hundreds of articles showing the url-pattern being specified as follows: struts2

Re: [S2] best practice for reading POST body in an action

2009-01-09 Thread Roger Varley
On Thursday 08 January 2009 18:12:48 John Cartwright wrote: > No, in this case the mime type is not application/x-www-form-urlencoded > and not sent w/ KVP from a form. The body of the POST is all content. > Hmm, then I'm sorry I'm probably not going to be much help. Although I've done quite a bi

Re: [S2] best practice for reading POST body in an action

2009-01-08 Thread John Cartwright
No, in this case the mime type is not application/x-www-form-urlencoded and not sent w/ KVP from a form. The body of the POST is all content. --john Roger Varley wrote: On Wednesday 07 January 2009 17:58:48 John Cartwright wrote: Hello All, Is there a best practice for using the body

Re: [S2] best practice for reading POST body in an action

2009-01-07 Thread Roger Varley
On Wednesday 07 January 2009 17:58:48 John Cartwright wrote: > Hello All, > > Is there a best practice for using the body of a POST request w/in an > action? The request is not key/value pairs but a blob of XML. Before I > dropped back to using a traditional HTTPServletRequest ap

[S2] best practice for reading POST body in an action

2009-01-07 Thread John Cartwright
Hello All, Is there a best practice for using the body of a POST request w/in an action? The request is not key/value pairs but a blob of XML. Before I dropped back to using a traditional HTTPServletRequest approach, I'd see if there was a better way in S2. Thanks! -

Re: Best Practice for Transfer Data from Action to Viewer JSP?

2008-09-24 Thread Guojun Zhu
uest/session and pull them in jsp pages. But it >> seems a bit against the idea of separation between model and view. If I >> change the view from JSP then there might be some difficulty to pull the >> object out. Is there any other ways to do this? What will be the best &g

Re: Best Practice for Transfer Data from Action to Viewer JSP?

2008-09-24 Thread Laurie Harper
view. If I change the view from JSP then there might be some difficulty to pull the object out. Is there any other ways to do this? What will be the best practice for a thing like this? Thanks. Placing data into request or session scope is the standard way to expose it for display in Struts1

Re: Best Practice for Transfer Data from Action to Viewer JSP?

2008-09-24 Thread Paweł Wielgus
can set > it as an attribute in request/session and pull them in jsp pages. But it > seems a bit against the idea of separation between model and view. If I > change the view from JSP then there might be some difficulty to pull the > object out. Is there any other ways to do this? Wh

Best Practice for Transfer Data from Action to Viewer JSP?

2008-09-23 Thread Guojun Zhu
view from JSP then there might be some difficulty to pull the object out. Is there any other ways to do this? What will be the best practice for a thing like this? Thanks. Guojun

RE: Best practice for passing success/error message to another dispatch (struts2)?

2008-08-12 Thread Dave Newton
essage, but also > bypasses running list()... > > > > Anyway, this appears to be working now. > > (I suspect that if validation on list() really does > fail it will not make it to "chain". So this is > still not a "perfect" solution.) > > > &

RE: Best practice for passing success/error message to another dispatch (struts2)?

2008-08-12 Thread Martin Gainty
is transmission. > From: [EMAIL PROTECTED] > To: user@struts.apache.org > Date: Tue, 12 Aug 2008 18:56:23 -0400 > Subject: RE: Best practice for passing success/error message to another > dispatch (struts2)? > > Good catch Pierre. It appeared to be working as is, bu

RE: Best practice for passing success/error message to another dispatch (struts2)?

2008-08-12 Thread Jeremy Conner
to be working now. (I suspect that if validation on list() really does fail it will not make it to "chain". So this is still not a "perfect" solution.) -Original Message- From: Pierre Thibaudeau [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 12, 2008 2:44 PM To: S

RE: Best practice for passing success/error message to another dispatch (struts2)?

2008-08-12 Thread Jeremy Conner
be having a [delete] link on each row of the list. You click [delete], it fails because the page was stale, so delegate to the list() dispatch with the error message from delete(). I am asking for a best practice because I can make this work in several ways, none of which seem clean. This seems

Re: Best practice for passing success/error message to another dispatch (struts2)?

2008-08-12 Thread Pierre Thibaudeau
This may be completely incidental to your problem, but, it seems to me that, if your actions are listed in that order, the first one will catch the occurrences of the second one. ("importRole" is a particular case of "*Role".) Shouldn't they be listed in the reverse order? > > Example struts.xm

RE: Best practice for passing success/error message to another dispatch (struts2)?

2008-08-12 Thread Martin Gainty
any party other than intended recipient. Sender does not necessarily endorse content contained within this transmission. > From: [EMAIL PROTECTED] > To: user@struts.apache.org > Date: Tue, 12 Aug 2008 15:05:42 -0400 > Subject: Best practice for passing success/error message to anothe

Best practice for passing success/error message to another dispatch (struts2)?

2008-08-12 Thread Jeremy Conner
I have an action with two dispatch methods. I have a single JSP that renders a list and also have an import file field. On import failure, I want to populate the list with an error message. THE PROBLEM: It looks like validation for the list() method is wiping the errors from the import() method.

Re: [S1] Best practice to transfer control to next page (out of JVM)?

2008-01-22 Thread Frank W. Zammetti
;> from >>> this I am also sending some data as a HTTPS POST. In case of using >>> response.sendRedirect(), it doesn't take care of the POST data. >>> >>> So, can anybody help me with what's the best practice in sending POST >>> request from

Re: [S1] Best practice to transfer control to next page (out of JVM)?

2008-01-22 Thread enthucoder
gt;> >> I want to transfer control to a non JSP page after I hit submit. Apart >> from >> this I am also sending some data as a HTTPS POST. In case of using >> response.sendRedirect(), it doesn't take care of the POST data. >> >> So, can anybody help me with

Re: [S1] Best practice to transfer control to next page (out of JVM)?

2007-12-11 Thread Laurie Harper
data. So, can anybody help me with what's the best practice in sending POST request from a Struts based J2EE application to another page (which is not a J2EE Application) I'm not sure I'm clear on what you want to accomplish. If you want to post a form to a page at a differ

[S1] Best practice to transfer control to next page (out of JVM)?

2007-12-11 Thread enthucoder
ybody help me with what's the best practice in sending POST request from a Struts based J2EE application to another page (which is not a J2EE Application) Thank you -- View this message in context: http://www.nabble.com/-S1--Best-practice-to-transfer-control-to-next-page-%28out

Re: [OT]Best practice: Transfer information from J2ee based app to ColdFusion based app

2007-10-11 Thread Martin Gainty
2:47 PM Subject: [OT]Best practice: Transfer information from J2ee based app to ColdFusion based app > Hi, > > This is not the right place, but I would be glad if I can get some help. I > just wanted to know what is the best practice if i need to transfer > control i.e. when I hit &#

[OT]Best practice: Transfer information from J2ee based app to ColdFusion based app

2007-10-11 Thread sriharsha . chevuru
Hi, This is not the right place, but I would be glad if I can get some help. I just wanted to know what is the best practice if i need to transfer control i.e. when I hit 'submit' button in a Struts based (or a JSP) based app using 'POST' method and the control now go

RE: struts 2 best practice for hibernate session

2007-08-23 Thread Baseer Patel MD
age- From: Leonidas Papadakis [mailto:[EMAIL PROTECTED] Sent: Thursday, August 23, 2007 3:41 PM To: Struts Users Mailing List Subject: Re: struts 2 best practice for hibernate session Thank you for your reply. What about the performance in this case... Is it going to be fast and stable ? L Ba

Re: struts 2 best practice for hibernate session

2007-08-23 Thread Leonidas Papadakis
d by spring(HibernateTemplate , SimpleJDBCTemplate..) -Original Message- From: Leonidas Papadakis [mailto:[EMAIL PROTECTED] Sent: Thursday, August 23, 2007 3:04 PM To: Struts Users Mailing List Subject: struts 2 best practice for hibernate session Greetings to all, since i am migrating to str

RE: struts 2 best practice for hibernate session

2007-08-23 Thread Baseer Patel MD
Sent: Thursday, August 23, 2007 3:04 PM To: Struts Users Mailing List Subject: struts 2 best practice for hibernate session Greetings to all, since i am migrating to struts2 i would like to ask which is the most efficient way to handle the hibernate sessions ... i.e. stick to the hibernateutil class tha

struts 2 best practice for hibernate session

2007-08-23 Thread Leonidas Papadakis
Greetings to all, since i am migrating to struts2 i would like to ask which is the most efficient way to handle the hibernate sessions ... i.e. stick to the hibernateutil class that is on hibernate website example ? Create a application scope bean accessible via spring ? Your answers are app

Re: Struts design best practice issue

2007-07-13 Thread Laurie Harper
actionform > to DTO and DTO to actionform, for example I have date in my jsp which is > split into three drop down fileds(year,month,day) and in the DTO its a > single field. How can manage this. Is it a standard that we can do data > type conversions in Action Class.?? I was trying t

Re: Struts design best practice issue

2007-07-13 Thread Viplav Kallepu
do data type conversion from my > actionform > to DTO and DTO to actionform, for example I have date in my jsp which is > split into three drop down fileds(year,month,day) and in the DTO its a > single field. How can manage this. Is it a standard that we can do data > type conversi

Re: Struts design best practice issue

2007-07-13 Thread Yoge
in my jsp which is split into three drop down fileds(year,month,day) and in the DTO its a single field. How can manage this. Is it a standard that we can do data type conversions in Action Class.?? I was trying to find out best practice. Please help me in sorting out the issue. Is there any design c

Struts design best practice issue

2007-07-12 Thread Viplav Kallepu
jsp which is split into three drop down fileds(year,month,day) and in the DTO its a single field. How can manage this. Is it a standard that we can do data type conversions in Action Class.?? I was trying to find out best practice. Please help me in sorting out the issue. Is there any design

Re: Best Practice pass data into an included jsp

2007-07-04 Thread Chris Pratt
You might look into the Tiles project (http://tiles.apache.org), that's exactly what it's designed to do. (*Chris*) On 7/4/07, Ezra Jennings <[EMAIL PROTECTED]> wrote: I tried using s:include with nested s:param tags, but could not read the parameters using the s:property tag at all. The onl

Re: Best Practice pass data into an included jsp

2007-07-04 Thread Ezra Jennings
I tried using s:include with nested s:param tags, but could not read the parameters using the s:property tag at all. The only way that I could read the parameter was by using: <%= "param1:" + request.getParameter("param1") %> as suggested in: http://www.nabble.com/struts2-how-to-access-a-param

Best Practice pass data into an included jsp

2007-06-11 Thread Scott Trafton
Here is the issue: I have a block of code that needs to be run on several different jsp's. Sometimes in a loop other times just once. The common code would be something like below File: callPassRow.jsp "> ... File: Random jsp's The calling code is the following. I am

Re: Best practice - Wizard flow

2007-05-24 Thread Jeromy Evans
l Message- From: Al Sutton [mailto:[EMAIL PROTECTED] Sent: Thursday, May 24, 2007 11:36 AM To: 'Struts Users Mailing List' Subject: RE: Best practice - Wizard flow As I see it the problem with that approach is if I'm at stage 3, I got back two screens to stage 1, change something, wh

Re: Mapped Properties - Struts 2 - Best practice

2007-05-24 Thread Don Brown
tags perspective, how do I represent it, assuming I have an iterator tag that is writing out the rows... Thx, Charbel -Original Message- From: Dave Newton [mailto:[EMAIL PROTECTED] Sent: Thursday, May 24, 2007 2:11 PM To: Struts Users Mailing List Subject: Re: Mapped Properties - Struts 2

RE: Mapped Properties - Struts 2 - Best practice

2007-05-24 Thread Charbel Abdul-Massih
tags perspective, how do I represent it, assuming I have an iterator tag that is writing out the rows... Thx, Charbel -Original Message- From: Dave Newton [mailto:[EMAIL PROTECTED] Sent: Thursday, May 24, 2007 2:11 PM To: Struts Users Mailing List Subject: Re: Mapped Properties - Struts 2 -

Re: Mapped Properties - Struts 2 - Best practice

2007-05-24 Thread Dave Newton
--- Charbel Abdul-Massih wrote: > What's the best way to use Mapped/Indexed Properties > in Struts 2.x??? In what way? Are you asking from a tag syntax standpoint, or...? d. Got a little couch potato?

Mapped Properties - Struts 2 - Best practice

2007-05-24 Thread Charbel Abdul-Massih
What's the best way to use Mapped/Indexed Properties in Struts 2.x???

Re: Best practice - Wizard flow

2007-05-24 Thread Shahak Nagiel
feasible it would be to port this over to S2... -Shahak - Original Message From: Charbel Abdul-Massih <[EMAIL PROTECTED]> To: Struts Users Mailing List Sent: Thursday, May 24, 2007 11:45:56 AM Subject: RE: Best practice - Wizard flow In the struts 1 world, we used to have one

RE: Best practice - Wizard flow

2007-05-24 Thread Charbel Abdul-Massih
Struts 2??? -Original Message- From: Al Sutton [mailto:[EMAIL PROTECTED] Sent: Thursday, May 24, 2007 11:36 AM To: 'Struts Users Mailing List' Subject: RE: Best practice - Wizard flow As I see it the problem with that approach is if I'm at stage 3, I got back two scr

Re: Best practice - Wizard flow

2007-05-24 Thread Michael Bowman
essionAware the only step required to > have the action stored in the session??? > > Charbel > -Original Message- > From: Dave Newton [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 24, 2007 11:27 AM > To: Struts Users Mailing List > Subject: RE: Best practice - Wizard flo

RE: Best practice - Wizard flow

2007-05-24 Thread Charbel Abdul-Massih
o: Struts Users Mailing List Subject: Re: Best practice - Wizard flow How about this. Each subsequent page in the wizard contains all the new form elements plus html hidden form elements for the previous save. This way you are hitting the sever between requests and not using the session. Each w

Re: Best practice - Wizard flow

2007-05-24 Thread Michael Bowman
ts Users Mailing List Subject: RE: Best practice - Wizard flow --- Charbel Abdul-Massih wrote: > I would have thought that something as simple as a > wizard would be easily doable...I would like to keep > away from the session as much as possible... The thing with "wizards" (at

RE: Best practice - Wizard flow

2007-05-24 Thread Al Sutton
7 16:34 To: Struts Users Mailing List Subject: Re: Best practice - Wizard flow How about this. Each subsequent page in the wizard contains all the new form elements plus html hidden form elements for the previous save. This way you are hitting the sever between requests and not using the session. E

Re: Best practice - Wizard flow

2007-05-24 Thread Marco Carnevale
How about this. Each subsequent page in the wizard contains all the new form elements plus html hidden form elements for the previous save. This way you are hitting the sever between requests and not using the session. Each wizard screen is basically the 'state' for itself plus all previous scr

RE: Best practice - Wizard flow

2007-05-24 Thread Charbel Abdul-Massih
In that case, is implementing SessionAware the only step required to have the action stored in the session??? Charbel -Original Message- From: Dave Newton [mailto:[EMAIL PROTECTED] Sent: Thursday, May 24, 2007 11:27 AM To: Struts Users Mailing List Subject: RE: Best practice - Wizard

RE: Best practice - Wizard flow

2007-05-24 Thread Dave Newton
--- Charbel Abdul-Massih wrote: > I would have thought that something as simple as a > wizard would be easily doable...I would like to keep > away from the session as much as possible... The thing with "wizards" (at least as I've used and implemented them) is that previous steps in the wizard flo

RE: Best practice - Wizard flow

2007-05-24 Thread Charbel Abdul-Massih
, May 24, 2007 11:12 AM To: 'Struts Users Mailing List' Subject: Re: Best practice - Wizard flow I know you said you didn't like sessions, but they're the only clean way of doing things stateful things between stateless pages. -Original Message- From: Al Sutton [mai

Re: Best practice - Wizard flow

2007-05-24 Thread Al Sutton
I know you said you didn't like sessions, but they're the only clean way of doing things stateful things between stateless pages. -Original Message- From: Al Sutton [mailto:[EMAIL PROTECTED] Sent: 24 May 2007 16:10 To: 'Struts Users Mailing List' Subject: RE: Best pr

RE: Best practice - Wizard flow

2007-05-24 Thread Al Sutton
Store the values in the session and clear them down when the user either completes the wizard or restarts it? -Original Message- From: Charbel Abdul-Massih [mailto:[EMAIL PROTECTED] Sent: 24 May 2007 16:04 To: Struts Users Mailing List Subject: RE: Best practice - Wizard flow I would

RE: Best practice - Wizard flow

2007-05-24 Thread Charbel Abdul-Massih
I would like to keep away from this method... Any other suggestions??? -Original Message- From: Lance [mailto:[EMAIL PROTECTED] Sent: Thursday, May 24, 2007 10:49 AM To: Struts Users Mailing List Subject: Re: Best practice - Wizard flow Why not draw all 3 pages but hide 2 of them and

Re: Best practice - Wizard flow

2007-05-24 Thread Lance
Why not draw all 3 pages but hide 2 of them and javascript the next page on and off. All pages inside the same form, last page submits. Charbel Abdul-Massih wrote: I am developing a wizard type flow with 3 pages in the wizard... We'll call them page 1, page 2, and page 3... I need use

Best practice - Wizard flow

2007-05-24 Thread Charbel Abdul-Massih
I am developing a wizard type flow with 3 pages in the wizard... We'll call them page 1, page 2, and page 3... I need users to be able to navigate between pages with a next/previous button, without losing any data that was entered in any of the pages. The last submit from page 3 will store

Re: [S2] action mapping best practice

2007-04-03 Thread joey
In the latest struts2 version 2.0.6,I only found .There was no ... So you confused me. Regards joey On 4/3/07, Jae K <[EMAIL PROTECTED]> wrote: I'm talking about struts2. My post was a reaction to that config file. I was just pointing out what my thoughts were on the best practices. I'm not a d

Re: [S2] action mapping best practice

2007-04-02 Thread Jae K
I'm talking about struts2. My post was a reaction to that config file. I was just pointing out what my thoughts were on the best practices. I'm not a developer on the struts team :) - Jae On 4/2/07, joey <[EMAIL PROTECTED]> wrote: Which version of struts2 are you talking about? I just found i

Re: [S2] action mapping best practice

2007-04-02 Thread joey
Which version of struts2 are you talking about? I just found in configuration files. You just confused me. On 4/3/07, Jae K <[EMAIL PROTECTED]> wrote: I have a comment about the MailReader tutorial. This is the action declaration for the Login action: ... ... To invoke this action, the user

[S2] action mapping best practice

2007-04-02 Thread Jae K
I have a comment about the MailReader tutorial. This is the action declaration for the Login action: ... ... To invoke this action, the user agent would first GET request Login_input, and then POST to Login to submit the form or Login_cancel to cancel, etc. IMHO this is a *bad* way to declare

Re: [S2] Best practice

2007-02-23 Thread janbrito
l this main action class passing a parameter >> type="menu" and also the id=menuID. If the user clicks in a link within a >> menu content, I would call this action class passing type="article" and >> id=articleID

Re: Best practice

2007-02-23 Thread Brian Thompson
I would have a switch to handle the different types. Is this a good practice? if not, what would be the best practice? Thanks - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Best practice

2007-02-23 Thread janbrito
ve a switch to handle the different types. Is this a good practice? if not, what would be the best practice? Thanks -- View this message in context: http://www.nabble.com/Best-practice-tf3278926.html#a9118968 Sent from the Struts - User mailing l

Re: Struts best practice

2007-02-17 Thread Laurie Harper
Zhang, Larry (L.) wrote: What logic should be typically added into the CustomRequestProcessor? Thanks. Typically, nothing since there is no need. In Struts 1.3 you don't need a custom RequestProcessor in any case, since you can simply extend or modify the Commons Chain configuration that dri

Struts best practice

2007-02-16 Thread Zhang, Larry \(L.\)
What logic should be typically added into the CustomRequestProcessor? Thanks. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [S2] User authentication best practice (2nd time...)

2007-01-31 Thread Sébastien LABEY
rovides a solution to manage user > authentication. > I also would like to know if someone could lead me to best practice for > user > creation / authentication to a web application. I'm worried about security > after the user has logged in, because of the parameters that appear

Re: [S2] User authentication best practice (2nd time...)

2007-01-31 Thread Ron Chan
urce to pick up ideas about how to setup all the layers HTH Sébastien LABEY wrote: > > Hi all (sorry for the previous unterminated mail), > > I would like to know if S2 provides a solution to manage user > authentication. > I also would like to know if someone could lead me to be

Re: [S2] User authentication best practice (2nd time...)

2007-01-31 Thread Sébastien LABEY
to:[EMAIL PROTECTED] > Sent: Wednesday, January 31, 2007 8:57 PM > To: Struts Users Mailing List > Subject: Re: [S2] User authentication best practice (2nd time...) > > Thanks for your answer. > Maybe I'm not very clear (sorry for my english). Let's imagine the > following &g

RE: [S2] User authentication best practice (2nd time...)

2007-01-31 Thread Thorsten Schäfer
uts Users Mailing List > Subject: Re: [S2] User authentication best practice (2nd time...) > > Thanks for your answer. > Maybe I'm not very clear (sorry for my english). Let's imagine the > following > request to access the page to update the user informations : >

Re: [S2] User authentication best practice (2nd time...)

2007-01-31 Thread Joe Germuska
On 1/31/07, Sébastien LABEY <[EMAIL PROTECTED]> wrote: Hi all (sorry for the previous unterminated mail), I would like to know if S2 provides a solution to manage user authentication. In short, no. S2 has a RolesInterceptor which allows you to specify that users in certain roles are allowed

Re: [S2] User authentication best practice (2nd time...)

2007-01-31 Thread Sébastien LABEY
IL PROTECTED] > Sent: Wednesday, January 31, 2007 8:22 PM > To: Struts mailing list > Subject: [S2] User authentication best practice (2nd time...) > > Hi all (sorry for the previous unterminated mail), > > I would like to know if S2 provides a solution to manage user > aut

RE: [S2] User authentication best practice (2nd time...)

2007-01-31 Thread Thorsten Schäfer
x27;d think that it's the same in S2. Cheers, Thorsten > -Original Message- > From: Sébastien LABEY [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 31, 2007 8:22 PM > To: Struts mailing list > Subject: [S2] User authentication best practice (2nd time...) > >

[S2] User authentication best practice (2nd time...)

2007-01-31 Thread Sébastien LABEY
Hi all (sorry for the previous unterminated mail), I would like to know if S2 provides a solution to manage user authentication. I also would like to know if someone could lead me to best practice for user creation / authentication to a web application. I'm worried about security after the

[S2] User authentication best practice

2007-01-31 Thread Sébastien LABEY
Hi all, I would like to know if S2 provides a solution to manage user authentication. I also would like to know if someone could lead me to best practice for user creation / authentication to a web application. I'm worried about security after the user has logged in, because of the param

Re: Best practice for external webapp configuration ?

2006-08-30 Thread Nicolas De Loof
e xml file or can be declared in a separate file which is referenced by properties-service.xml. Hello, I'm searching for best practice in JEE applications to put configuration elements outside the war/ear. Here is what I mean : My webapp requires some filesystem path to work (logs d

RE: Best practice for external webapp configuration ?

2006-08-30 Thread Lance
On jboss, this can be done by configuring the SystemPropertiesService. @see jboss\server\all\deploy\properties-service.xml Properties can be configured inline in the xml file or can be declared in a separate file which is referenced by properties-service.xml. > Hello, > > I'm sear

Re: Best practice for external webapp configuration ?

2006-08-30 Thread Nicolas De Loof
i a écrit : You can set them in your startup class by reading the configuration file. System.setProperty() /Ashwani -Original Message- From: Nicolas De Loof [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 30, 2006 1:08 PM To: Struts Users Mailing List Subject: Best practice

RE: Best practice for external webapp configuration ?

2006-08-30 Thread Kalra, Ashwani
You can set them in your startup class by reading the configuration file. System.setProperty() /Ashwani -Original Message- From: Nicolas De Loof [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 30, 2006 1:08 PM To: Struts Users Mailing List Subject: Best practice for external

  1   2   3   4   >