You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@turbine.apache.org by Leandro Rodrigo Saad Cruz <le...@ibnetwork.com.br> on 2001/10/02 22:29:43 UTC

how to make action events secure ???

Hi all...
I think some one has had this problem before but the mailing list didn't
help !
I want to make all methods doXXX() in my action(extends
VelocitySecureAction) secure. but turbine never calls iss Authorized if
I'm using an actionEvent type of class.
I thing VelocityActionEvent.executeEvents() has to be modified to call
isAuthorized before any doXXX() method . Is this  a general need or I
better modify only my local copy ???

-- 
Leandro Rodrigo Saad Cruz
IT - Inter Business Tecnologia e Servicos (IB)


---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-dev-help@jakarta.apache.org


Re: how to make action events secure ???

Posted by Jon Stevens <jo...@latchkey.com>.
on 10/2/01 2:14 PM, "Leandro Rodrigo Saad Cruz" <le...@ibnetwork.com.br>
wrote:

> Of course I read, but TemplateSecureAction.java doesn seem to implement
> the feature I'm looking for !

In T3.0 it certainly does have an isAuthorized() method.

-jon


---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-dev-help@jakarta.apache.org


Re: how to make action events secure ???

Posted by Leandro Rodrigo Saad Cruz <le...@ibnetwork.com.br>.
On Tue, 2001-10-02 at 17:50, Jon Stevens wrote:
> on 10/2/01 1:44 PM, "Leandro Rodrigo Saad Cruz" <le...@ibnetwork.com.br>
> wrote:
> 
> > I think this issue should be resolved at TemplateAction.java (in T3)
> 
> No. Read what I wrote...It is in TemplateSecureAction.java

Of course I read, but TemplateSecureAction.java doesn seem to implement 
the feature I'm looking for !

> 
> > but it is almost identical to VeolicyActionEvent (in T2)
> > could you point me where to locate the changes ???
> 
> Try reading what I'm writing.


> 
> Either way, this isn't rocket science...this should take you about 10
> minutes to implement yourself if Turbine doesn't already do it for you.

Ok.... I'll implement it !!

> 
> -jon
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: turbine-dev-help@jakarta.apache.org
-- 
Leandro Rodrigo Saad Cruz
IT - Inter Business Tecnologia e Servicos (IB)


---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-dev-help@jakarta.apache.org


Re: how to make action events secure ???

Posted by Jon Stevens <jo...@latchkey.com>.
on 10/2/01 1:44 PM, "Leandro Rodrigo Saad Cruz" <le...@ibnetwork.com.br>
wrote:

> I think this issue should be resolved at TemplateAction.java (in T3)

No. Read what I wrote...It is in TemplateSecureAction.java

> but it is almost identical to VeolicyActionEvent (in T2)
> could you point me where to locate the changes ???

Try reading what I'm writing.

Either way, this isn't rocket science...this should take you about 10
minutes to implement yourself if Turbine doesn't already do it for you.

-jon


---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-dev-help@jakarta.apache.org


Re: how to make action events secure ???

Posted by Leandro Rodrigo Saad Cruz <le...@ibnetwork.com.br>.
I think this issue should be resolved at TemplateAction.java (in T3)
but it is almost identical to VeolicyActionEvent (in T2)
could you point me where to locate the changes ???

Template
On Tue, 2001-10-02 at 17:32, Jon Stevens wrote:
> on 10/2/01 1:29 PM, "Leandro Rodrigo Saad Cruz" <le...@ibnetwork.com.br>
> wrote:
> 
> > Hi all...
> > I think some one has had this problem before but the mailing list didn't
> > help !
> > I want to make all methods doXXX() in my action(extends
> > VelocitySecureAction) secure. but turbine never calls iss Authorized if
> > I'm using an actionEvent type of class.
> > I thing VelocityActionEvent.executeEvents() has to be modified to call
> > isAuthorized before any doXXX() method . Is this  a general need or I
> > better modify only my local copy ???
> 
> In T3, I know that this issue is resolved. It is called
> TemplateSecureAction.java and it works the same as TemplateSecureScreen.java
> 
> In T2, there should be an action class that has the isAuthorized() method
> calling it in. If there isn't, then create one and contribute it.
> 
> -jon
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: turbine-dev-help@jakarta.apache.org
-- 
Leandro Rodrigo Saad Cruz
IT - Inter Business Tecnologia e Servicos (IB)


---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-dev-help@jakarta.apache.org


Re: how to make action events secure ???

Posted by Jon Stevens <jo...@latchkey.com>.
on 10/2/01 1:29 PM, "Leandro Rodrigo Saad Cruz" <le...@ibnetwork.com.br>
wrote:

> Hi all...
> I think some one has had this problem before but the mailing list didn't
> help !
> I want to make all methods doXXX() in my action(extends
> VelocitySecureAction) secure. but turbine never calls iss Authorized if
> I'm using an actionEvent type of class.
> I thing VelocityActionEvent.executeEvents() has to be modified to call
> isAuthorized before any doXXX() method . Is this  a general need or I
> better modify only my local copy ???

In T3, I know that this issue is resolved. It is called
TemplateSecureAction.java and it works the same as TemplateSecureScreen.java

In T2, there should be an action class that has the isAuthorized() method
calling it in. If there isn't, then create one and contribute it.

-jon


---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-dev-help@jakarta.apache.org