RE : Status of Struts integration with container managed security and alternatives

[Michael <mi...@idtect.com>]

> tag in the struts config XML file.  The problem is with tag 
> is that it doesn't work.  I posted a couple questions about 

A slight clarification I meant to add.  The roles attribute will prevent
the user from using the action if the user doesn't belong to the roles
specified.  However that alone is not enough to be useful.  I don't
think anyone can use this feature the way it is currently functioning.
If the user hasn't authenticated the user is given an error page.  From
Craig's comments, it doesn't seem possible to redirect the user to a
login page.   To accomplish this, the security must be specified in the
web.xml file.

Michael



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>