hi,

I am a newbie in Struts 2.

Here is what i want to achieve:

I want to secure my web application using Container Managed Security. I
secure all the URLs by placing a security constraint and map the relevant
users/groups in my web.xml. Our security requirements are straight forward
and we don't need action level security.

To start with we used Basic Authentication/ When i access my action class:

I noticed a few things:

(1) The processing of action class happens even when the basic challenge
pop-up box is still awaiting user response.
(2) The security credentials do not seem to be propagated to the downstream
components (in my case we are invoking a Secured EJB from this action
class)

I am unable to find some samples in this space despite searching a lot.

Am i missing something fundamental here?

Appreciate any assistance.

Thanks
Manglu


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to