Put your JSPs unde WEB-INF and forward to the JSP in struts-config.xml: http://www.onjava.com/pub/a/onjava/2002/10/30/jakarta.html?page=3
For roles, use declarative roles: http://wiki.apache.org/struts/ApplicationSecurity http://www.onjava.com/pub/a/onjava/2004/02/18/strutssecurity.html -ed On 5/17/06, Pankaj Gupta <[EMAIL PROTECTED]> wrote:
Hi All, I am new to struts and have a basic question. I am making an application and I want that all the pages should be accessed through the menu items only.i.e. if a user copies the url in the browser the page should not get loaded. How can I enforce such a security? Another question is how can I selectively disable some menus based on login roles? regards, Pankaj --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]