org.apache.struts.chain.commands.servlet: public class: AuthorizeAction

org.apache.struts.chain.commands.servlet
public class: AuthorizeAction [javadoc | source]

java.lang.Object
   org.apache.struts.chain.commands.ActionCommandBase
      org.apache.struts.chain.commands.AbstractAuthorizeAction
         org.apache.struts.chain.commands.servlet.AuthorizeAction

All Implemented Interfaces:
ActionCommand

Determine if the action is authorized for the given roles.

version: $ - Rev: 471754 $ $Date: 2005-11-12 13:01:44 -0500 (Sat, 12 Nov 2005) $

Method from org.apache.struts.chain.commands.servlet.AuthorizeAction Summary:
getErrorMessage, isAuthorized

Methods from org.apache.struts.chain.commands.AbstractAuthorizeAction:
execute, getErrorMessage, isAuthorizationRequired, isAuthorized

Methods from org.apache.struts.chain.commands.ActionCommandBase:
execute, execute

Methods from java.lang.Object:
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method from org.apache.struts.chain.commands.servlet.AuthorizeAction Detail:
protected String getErrorMessage(ActionContext context, ActionConfig actionConfig) { ServletActionContext servletActionContext = (ServletActionContext) context; // Retrieve internal message resources ActionServlet servlet = servletActionContext.getActionServlet(); MessageResources resources = servlet.getInternal(); return resources.getMessage("notAuthorized", actionConfig.getPath()); }
protected boolean isAuthorized(ActionContext context, String[] roles, ActionConfig mapping) throws Exception { // Identify the HTTP request object ServletActionContext servletActionContext = (ServletActionContext) context; HttpServletRequest request = servletActionContext.getRequest(); // Check the current user against the list of required roles for (int i = 0; i < roles.length; i++) { if (request.isUserInRole(roles[i])) { return (true); } } // Default to unauthorized return (false); }

Method from org.apache.struts.chain.commands.servlet.AuthorizeAction Detail:

 protected String getErrorMessage(ActionContext context,
    ActionConfig actionConfig) {
        ServletActionContext servletActionContext =
            (ServletActionContext) context;
        // Retrieve internal message resources
        ActionServlet servlet = servletActionContext.getActionServlet();
        MessageResources resources = servlet.getInternal();
        return resources.getMessage("notAuthorized", actionConfig.getPath());
}

 protected boolean isAuthorized(ActionContext context,
    String[] roles,
    ActionConfig mapping) throws Exception {
        // Identify the HTTP request object
        ServletActionContext servletActionContext =
            (ServletActionContext) context;
        HttpServletRequest request = servletActionContext.getRequest();
        // Check the current user against the list of required roles
        for (int i = 0; i <  roles.length; i++) {
            if (request.isUserInRole(roles[i])) {
                return (true);
            }
        }
        // Default to unauthorized
        return (false);
}