Guidance on JAAS and Struts

[Tim Clotworthy <tc...@bka-inc.com>]

Hello,
Jakarta indicates that Struts1.1 will provide "direct support" for JAAS,
but (best as I can tell), provides no specific guidance on how best to
use JAAS and Struts.

Specifically, I am looking for good guidance on Struts and JAAS
authorization (the second "A" in JAAS), as the authentication part (the
first "A" in JAAS) with Struts is straight-forward enough.

The only info I have found regarding Struts and JAAS is this relatively
old article: http://www.mooreds.com/jaas.html from Dan Moore. The
authentication section is fine, but I was wondering whether anyone has
alternative ideas for the authorization part to Dan's suggestion of
extending the Action Servlet and overriding the process method (which is
perhaps not ideal from a maintenance perspective.


Thanks so much in advance!

Re: Guidance on JAAS and Struts

[Vic Cekvenich <vc...@basebeans.com>]

Vic Cekvenich wrote:
> Search for JDBC relms. That will put you on the right path.
> .V
> 
> Tim Clotworthy wrote:
> 
>> Hello,
>> Jakarta indicates that Struts1.1 will provide "direct support" for JAAS,
>> but (best as I can tell), provides no specific guidance on how best to
>> use JAAS and Struts.
>>
>> Specifically, I am looking for good guidance on Struts and JAAS
>> authorization (the second "A" in JAAS), as the authentication part (the
>> first "A" in JAAS) with Struts is straight-forward enough.
>>
>> The only info I have found regarding Struts and JAAS is this relatively
>> old article: http://www.mooreds.com/jaas.html from Dan Moore. The
>> authentication section is fine, but I was wondering whether anyone has
>> alternative ideas for the authorization part to Dan's suggestion of
>> extending the Action Servlet and overriding the process method (which is
>> perhaps not ideal from a maintenance perspective.
>>
>>
>> Thanks so much in advance!
>>
>>
> 



---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org