Put your JSPs unde WEB-INF and forward to the JSP in struts-config.xml:
http://www.onjava.com/pub/a/onjava/2002/10/30/jakarta.html?page=3

For roles, use declarative roles:
http://wiki.apache.org/struts/ApplicationSecurity
http://www.onjava.com/pub/a/onjava/2004/02/18/strutssecurity.html

-ed

On 5/17/06, Pankaj Gupta <[EMAIL PROTECTED]> wrote:
Hi All,

I am new to struts and have a basic question. I am making an application
and I want that all the pages should be accessed through the menu items
only.i.e. if a user copies the url in the browser the page should not
get loaded. How can I enforce such a security?

Another question is how can I selectively disable some menus based on
login roles?

regards,
Pankaj



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to