Return-Path: Delivered-To: apmail-jakarta-struts-user-archive@jakarta.apache.org Received: (qmail 82859 invoked by uid 500); 24 Aug 2001 15:58:28 -0000 Mailing-List: contact struts-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk Reply-To: struts-user@jakarta.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list struts-user@jakarta.apache.org Received: (qmail 82788 invoked from network); 24 Aug 2001 15:58:27 -0000 Received: from uranus.ubs.com (HELO be-juno1.ubinet.ubs.com) (193.134.254.67) by h31.sny.collab.net with SMTP; 24 Aug 2001 15:58:27 -0000 Received: from hermes6.hoegger.zuerich.ubs.ch (hermes6.mail.appl.ubs.ch [160.59.113.91]) by be-juno1.ubinet.ubs.com (8.11.2/8.11.2) with ESMTP id f7OFvwC19596 for ; Fri, 24 Aug 2001 17:57:58 +0200 (MET DST) Received: from localhost (root@localhost) by hermes6.hoegger.zuerich.ubs.ch (8.9.3 (PHNE_18979)/8.9.3) with ESMTP id RAA20824 for ; Fri, 24 Aug 2001 17:57:57 +0200 (METDST) From: devon.bowen@ubs.com X-OpenMail-Hops: 2 Date: Fri, 24 Aug 2001 17:57:51 +0200 Message-Id: Subject: RE: Re: Security, authentication and authorisation with Struts MIME-Version: 1.0 TO: struts-user@jakarta.apache.org Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline; filename="BDY.TXT" ;Creation-Date="Fri, 24 Aug 2001 17:57:51 +0200" Content-Transfer-Encoding: 7bit X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N > i would prefer not to put the authentication code in > the action because it opens the possibility of having > authentication logic in each and every action In my case, each action needs a different authentication. For example, some users have read-only access and some have modify access. Devon