在Struts中如何定认action的role属性？

03-10-06 xuhaitao71

见下面的web.xml:
<web-app>
<display-name>Certificate Servlet</display-name>
<servlet>
<servlet-name>CertificateServlet</servlet-name>
<servlet-class>weblogic.servlet.security.CertificateServlet</servlet-class>
</servlet>
<servlet>
<servlet-name>FileServlet</servlet-name>
<servlet-class>weblogic.servlet.FileServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>CertificateServlet</servlet-name>
<url-pattern>/</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>FileServlet</servlet-name>
<url-pattern>.html</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>FileServlet</servlet-name>
<url-pattern>.gif</url-pattern>
</servlet-mapping>

<security-constraint>
<web-resource-collection>
<web-resource-name>CertificateServlet</web-resource-name>
<url-pattern>*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config>
<security-role>
<role-name>admin</role-name>
</security-role>
</web-app>
与此类似，我应在Struts框架中定认basic security?

xuhaitao71

2003-10-06 16:57

web.xml重传

<web-app>
  <display-name>Certificate Servlet</display-name>
  <servlet>
    <servlet-name>CertificateServlet</servlet-name>
    <servlet-class>weblogic.servlet.security.CertificateServlet</servlet-class>
  </servlet>
  <servlet>
    <servlet-name>FileServlet</servlet-name>
    <servlet-class>weblogic.servlet.FileServlet</servlet-class>
  </servlet>

  <servlet-mapping>
    <servlet-name>CertificateServlet</servlet-name>
    <url-pattern>/</url-pattern>
  </servlet-mapping>

  <servlet-mapping>
  	<servlet-name>FileServlet</servlet-name>
  	<url-pattern>*.html</url-pattern>
  </servlet-mapping>

  <servlet-mapping>
    <servlet-name>FileServlet</servlet-name>
    <url-pattern>*.gif</url-pattern>
  </servlet-mapping>

  <!--
    Authentication
  -->

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>CertificateServlet</web-resource-name>
      <url-pattern>*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
       <role-name>admin</role-name>
    </auth-constraint>
  </security-constraint>

  <login-config>
    <auth-method>BASIC</auth-method>
  </login-config>

  <security-role>
    <role-name>admin</role-name>
  </security-role>

</web-app>

xuhaitao71

2003-10-06 21:26

已经解决，其实把CertificateServlet改为Struts中的唯一的ActionServlet即可，不必用到action的role属性，例(在weblogic7中通过)：

<security-constraint>
    <display-name>admin</display-name>
    <web-resource-collection>
      <web-resource-name>action</web-resource-name>
      <url-pattern>/initial.do</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>admin</role-name>
    </auth-constraint>
    <user-data-constraint>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <login-config>
    <auth-method>BASIC</auth-method>
  </login-config>
  <security-role>
    <role-name>admin</role-name>
  </security-role>
<p>