OIM custom web page developed shows up on copy pasting the URL in browser

Question

Hi experts,
I am facing this weird issue. I have developed a custom web page to generate password after adding custom menu item in OIM.
The web page shows up on copy pasting the URL in browser. Only System admins after loggin in should get this menu item and page after clicking on it.
http://xxxx:7778/xlWebApp/generatePassword.do
But any1 can access this page currently. I have changed the action class to check for valid session,so clicking reset doesnt trigger the code.
So atleast the functionality is protected.
But the page still shows up on copy pasting the URL. How do i prevent this from happening ??
Any suggestions and pointers would be appreciated.
Regards,
Confused developer.

Answer 1

My action class does extend tcAction class.
Does my action class need initialisation code i.e. below lines of code ??
               ConfigurationClient.ComplexSetting config = ConfigurationClient
                         .getComplexSettingByPath("Discovery.CoreServer");
               final Hashtable env = config.getAllSettings();
               tcSignatureMessage moSignature = tcCryptoUtil.sign("xelsysadm",
                         "PrivateKey");
               ioUtilityFactory = new tcUtilityFactory(env, moSignature);
1 more question :
Should i check for valid HttpSession() in the execute function() of the action class ??
Can you share code for a sample custom action class please ??
Thanks in advance.