i work on an application that uses Struts2 and Struts1. Now i want to implement authentication for different actions. I'd like to use an interceptor
to check to which namespace
an action
belongs. I wrapped all Struts1 action with Struts2 action. So all strut1-action run through the interceptor.
<action name="contactsList" class="com.opensymphony.xwork2.ActionSupport">
<result name="success">contactsList.do</result>
</action>
The problem is that if a user enters a struts1-action in the browser the interceptor will not be called.
My question: Is there a difference between action calls coming from the browser and action calls called via Struts configuration. If it is possible, is it possible to disallow Struts1 actions from the browser but from within struts it is allowed?