user Digest 10 Aug 2010 12:38:18 -0000 Issue 9142

Topics (messages 207151 through 207163):

if else in XML via struts 1.2
 207151 by: abhishek jain
 207152 by: Michael Dekmetzian

Get i18n text problem
 207153 by: Franz Wong
 207156 by: Michal Ciasnocha

URL authentication
 207154 by: Guy Thomas
 207155 by: Rahul Mohan
 207157 by: Dave Newton
 207159 by: CRANFORD, CHRIS
 207162 by: Guy Thomas

Hosting for Struts 1.2 tomcat
 207158 by: abhishek jain

Re: Re : s:url tag - multiple params with same name
 207160 by: Stephen Turner

Re: s:url tag - multiple params with same name
 207161 by: Stephen Turner

Problems with List<Map<>> OGNL expression
 207163 by: Obinna

Administrivia:

---------------------------------------------------------------------
To post to the list, e-mail: user@(protected)
To unsubscribe, e-mail: user-digest-unsubscribe@(protected)
For additional commands, e-mail: user-digest-help@(protected)

----------------------------------------------------------------------

Hi friends,
I am using struts 1.2 on tomcat, 5.5 and apache,

I am using some dynamic html which need an xml file. no problem till here,
but i need to change the content of that xml file. depending on some request
parameter.
I need to know is there a way, i can process and write some if else
condition on the xml file, probably allowing making the xml file behave like
jsp file.

One solution is that i do some rule via urlrewrite / mod_rewrite which
passes all request for that xml to a jsp page, but that dont seem to be a
good sol to me.

Pl. advice.
--
Thanks and kind Regards,
Abhishek jain

Hi group,

In the jsp page, I have a page scope variable "title". This variable stores
the key of the resource bundle. I can print the value by <%= title %>.
However, I am not able to use it with <s:text/>.

I have tried <s:text name="${title}"/> or <s:text name="<%= title %>"/>. But
both of them do not work.

Thanks.
Franz

Hi Franz,

you can use tag <s:property value="getText(title)" /> for text
translation (where "title" is name of your variable).


Best regards,

Michal

Franz Wong wrote on 9.8.2010 5:14:
> Hi group,
>
> In the jsp page, I have a page scope variable "title". This variable stores
> the key of the resource bundle. I can print the value by<%= title %>.
> However, I am not able to use it with<s:text/>.
>
> I have tried<s:text name="${title}"/> or<s:text name="<%= title %>"/>. But
> both of them do not work.
>
> Thanks.
> Franz
>

I am adding authentication to a Struts2 web application by implementing an authentication interceptor.
With an interceptor, as far as I understand, you can prevent non-authenticated perons from accessing specific actions.

However, suppose somebody forwards a URL to a specific pdf-file to a non-authenticated "outsider".
For example: http://.../persberichten/persbericht12954.pdf

Which Struts2 mechanism can I use to prevent the non-authenticated "outsider" from accessing that PDF?

Or, another example:

http://.../persoverzicht/ophalenpub.jsp?id=27859

Is it possible to prevent the outsider from accessing that specific press article?



-------------
Aan dit bericht kunnen geen rechten worden ontleend. Alle berichten naar dit professioneel e-mailadres kunnen door de werkgever gelezen worden.
Ondernemingsnummer: 0253.973.219

I think we are mixing two issues here. Authentication deals with verifying
whether a user is what he/she claims to be and authorization is the
mechanism for checking whether someone has access to a particular
resource.

The standard practice is to prevent unauthenticated users from accessing
any resource within your app. This is typically done by an interceptor
that allows a request to pass through only if it can find a user-specific
token in the session. This should solve your first problem.

The second question is about authorization, where a particular user is not
having access to a particular resource. This can also be built into the
same interceptor, but you will have to supply the authorization table
somehow - usually from an LDAP or RDBMS.

- Rahul



From:
Guy Thomas <guy.thomas@(protected)>
To:
Struts Users Mailing List <user@(protected)>
Date:
09-08-2010 11:47
Subject:
URL authentication



I am adding authentication to a Struts2 web application by implementing an
authentication interceptor.
With an interceptor, as far as I understand, you can prevent
non-authenticated perons from accessing specific actions.

However, suppose somebody forwards a URL to a specific pdf-file to a
non-authenticated "outsider".
For example: http://.../persberichten/persbericht12954.pdf

Which Struts2 mechanism can I use to prevent the non-authenticated
"outsider" from accessing that PDF?

Or, another example:

http://.../persoverzicht/ophalenpub.jsp?id=27859

Is it possible to prevent the outsider from accessing that specific press
article?



-------------
Aan dit bericht kunnen geen rechten worden ontleend. Alle berichten naar
dit professioneel e-mailadres kunnen door de werkgever gelezen worden.
Ondernemingsnummer: 0253.973.219



=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you

FWIW, I wouldn't combine the two into the same interceptor since they're
rather different things... plus resource access is more likely to take place
in a different layer, and not be a cross-cutting concern.

Dave

On Mon, Aug 9, 2010 at 3:07 AM, Rahul Mohan <rahul.mohan@(protected):

> I think we are mixing two issues here. Authentication deals with verifying
> whether a user is what he/she claims to be and authorization is the
> mechanism for checking whether someone has access to a particular
> resource.
>
> The standard practice is to prevent unauthenticated users from accessing
> any resource within your app. This is typically done by an interceptor
> that allows a request to pass through only if it can find a user-specific
> token in the session. This should solve your first problem.
>
> The second question is about authorization, where a particular user is not
> having access to a particular resource. This can also be built into the
> same interceptor, but you will have to supply the authorization table
> somehow - usually from an LDAP or RDBMS.
>
> - Rahul
>
>
>
> From:
> Guy Thomas <guy.thomas@(protected)>
> To:
> Struts Users Mailing List <user@(protected)>
> Date:
> 09-08-2010 11:47
> Subject:
> URL authentication
>
>
>
> I am adding authentication to a Struts2 web application by implementing an
> authentication interceptor.
> With an interceptor, as far as I understand, you can prevent
> non-authenticated perons from accessing specific actions.
>
> However, suppose somebody forwards a URL to a specific pdf-file to a
> non-authenticated "outsider".
> For example: http://.../persberichten/persbericht12954.pdf
>
> Which Struts2 mechanism can I use to prevent the non-authenticated
> "outsider" from accessing that PDF?
>
> Or, another example:
>
> http://.../persoverzicht/ophalenpub.jsp?id=27859
>
> Is it possible to prevent the outsider from accessing that specific press
> article?
>
>
>
> -------------
> Aan dit bericht kunnen geen rechten worden ontleend. Alle berichten naar
> dit professioneel e-mailadres kunnen door de werkgever gelezen worden.
> Ondernemingsnummer: 0253.973.219
>
>
>
> =====-----=====-----=====
> Notice: The information contained in this e-mail
> message and/or attachments to it may contain
> confidential or privileged information. If you are
> not the intended recipient, any dissemination, use,
> review, distribution, printing or copying of the
> information contained in this e-mail message
> and/or attachments to it are strictly prohibited. If
> you have received this communication in error,
> please notify us by reply e-mail or telephone and
> immediately and permanently delete the message
> and any attachments. Thank you
>
>
>

hi,
I need shared hosting for struts 1.2 on tomcat. Would anyone recommend one,
also what is better VPS or shared hosting for this .
I am looking for lowcost , good quality .
Please advice.
--
Thanks and kind Regards,
Abhishek jain

I'm using Struts 2.1.8.1, xwork 2.1.6 and Tthere seems to be an issue trying
to populate the fields of a Lis of Maps using OGNL.

In my action I have an action property name 'grid' with appropriate
getters/setters of type ArrayList<HashMap<String,String>> which I want to
populate dynamically from a grid of textboxes.

I am setting my textbox name property to
name="grid[%{#status.index}]['MapKey']" such that the html name properties
resolves to:   grid[0]['MapKey'], grid[1]['MapKey'], grid[2]['MapKey'],
etc...

I expect this to dynamically create and populate a new ArrayList with new
HashMap instances and put a 'MapKey' entry in each map with a value equal to
the value of the textfield.

However, I am getting an xwork OGNL error which sys that it is trying to
covert the String 'MakKey' to type 'HashMap' and obviously failing.

The syntax grid[%{#status.index}]['MapKey'] appears correct for what I'm
trying to do, but somehow OGNL is not interpreting the result
of grid[%{#status.index}] as a list entry and the trying to create the new
HashMap instance before populating it.

Is there a different syntax for chain the indexed properties for a List of
Maps?

Thanks,
Strykker