[Struts] Use or re-define processRoles

Question

Hello forum,
in my struts web application i need differentiate accesso to determinate actions.
For example, only the user type A can invoke "addItem" action.
In Struts APi, i've found the method processRoles for RequestProcess class.
I don't know how use it.
Can you to do an example please?
Thanks, bye.

Answer 1

yes, you are right, struts controller passes it to UIX controller to handle the events.
you may return a Page object as the result of the EventResult. Then struts will try to find a forward with the same name as the Page and follow it.
In 10gProduction we do things a little differently:
if there is an event=foo on the request URL:
1. struts controller will try to find and execute an onFoo method on the matching DataAction/DataPage subclass.
2. if there is no onFoo method, struts will try to execute an action binding (on the UIModel for the DataAction) with the name foo.
3. if steps 1 or 2 fail to do anything, then struts will ask UIX controller to handle the event.
after the event is handled:
4. if the UIX event handler returns an EventResult with a Page as the result, struts will try to find a forward that matches the Page name.
5. otherwise, struts will try to find a forward with the name foo
6. if both steps 4 and 5 fail to find a forward, then no navigation will take place, and struts will render the same DataAction/DataPage again.