Securing Struts Application in Action Level

Question

I have a struts application. I would like to secure it. I have a set of roles for the application and my requirement is I have to restrict access to Actions based on user role and restrict access url based on URL. Further i use the same roles for creating menu using Struts-Menu (Roles set in menu-config.xml) Please suggest solutions.

Answer 1

I solved this by following the below link http://onjava.com/onjava/2004/02/18/strutssecurity.html.

I used the same roles I specified in menu-config in Struts-config to restrict access to Action