ansaurus

Question

Answer 1

A:

But of course. Struts matches wildcard mappings in the order they appear in your config file, so the last one that matches a request will be the one used (i.e. less specific matches must be before more specific matches).

Something like this should do the trick:

 <action name="*">
   <result>/WEB-INF/jsp/{1}.ftl</result>
 </action>  

 <action name="*-success">
   <result>/WEB-INF/jsp/access-denied.jsp</result>
 </action>

The above will keep your current behaviour and cause any file with a -success suffix in the name to end up at access-denied.jsp.

Edit: You'll need to enable this property to have slashes in your action names:

<constant name="struts.enable.SlashesInActionNames" value="true"/>

To make it conditional, I would use an interceptor stack that checked if a user was logged in before forwarding to the .jsp:

 <action name="secure/*">
   <interceptor-ref name="authenticationStack"/>  
   <result>/WEB-INF/jsp/{1}.jsp</result>
 </action>

In your authenticationStack you would need an Interceptor that determines if a user is logged in. If not you would forward them to an access-denied.jsp type page from within the interceptor. The Struts docs on Interceptors should help you out.

Pat 2010-07-15 15:51:30

That's awesome. Thanks! I'm trying to do something a little bit similar now. Now the url I want to catch is anything in the "/secure/" area. So my action name is "*/secure/*" but this isn't working. Furthermore, is there a way to make it conditional? I only want to catch this if a user is not logged in.

JPC 2010-07-15 16:38:22

I tried your updates but they didn't work. I had the interceptor already in place, it's the struts.xml part that isn't working. The interceptor never gets called. I included the constant, and the action part.

JPC 2010-07-16 14:16:12

check out my edits

JPC 2010-07-16 15:11:11

Since you're now logged in and not being forwarded by the interceptor, my guess is that struts doesn't know how to handle the wildcard '/secure**' namespace definition.

Pat 2010-07-19 12:21:36

ansaurus

tags:

views:

answers:

Restricting access to URLs in Struts 2

related questions