Security Check on Every Page

[fatcodeguy]

Hi,

I perform a security check on every page to check if a user is logged in, and what his/her access is. If they haven't logged in, or don't have access, it redirects them to the login page.

Is there another way to do this (like have a servlet or something check for it) instead of having the scriptlet on every page? I'm using Struts, is there a better way using the framework?

Thanks

 

[sedj]

The easiest way in your situation IMO would be to have a custom tag that checks login status, much like what I suspect you have alreay.

How you check that status is up to your - URL, cookie or session ...

--------------------------------------------------
Free Database Connection Pooling Software

http://www.primrose.org.uk

 

[jemminger]

i don't use struts so i'm not that familiar, but if i understand correctly, you have an action servlet that processes each request and sends to the appropriate view? just add your security check in the action servlet, or perhaps make a security filter



=========================================================
-jeff

http://www.jeffemminger.com

try { succeed(); } catch(E) { tryAgain(); } finally { rtfm(); }

 

[fatcodeguy]

Thanks guys!