Hi Marco

It might be worth checking this issue https://issues.apache.org/jira/browse/OFBIZ-2103 for some discussion around this topic.

Regards
Scott

On 8/06/2009, at 7:12 PM, mrisal...@libero.it wrote:

Thanks David,

what about to applying the attached patch ?

Thanks
Marco


I'd prefer to see the bug fixed instead of changing the functionality.
The bug I'm referring to is that there is no login link in webtools.
Whether we change the main request to require auth or not that should
be fixed...

-David


On Jun 7, 2009, at 9:19 AM, Marco Risaliti wrote:

Hi to all,

I have seen that sometimes is allow from webtools to reach the
attached screen without having any possibility to login to the
application.
In the past there was a link that permit to login but now is only
possible to change manually the request from /control/main to /
control/login but it cannot be acceptable for a final user.
I suggest to made the following changes (in the attached patch) so
if an user that access to webtools but it is not logged in it will
forward automatically to the login page.

What did you think of it ?

Thanks
Marco

Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
===================================================================
--- framework/webtools/webapp/webtools/WEB-INF/controller.xml   
(revision 781833)
+++ framework/webtools/webapp/webtools/WEB-INF/controller.xml   
(working copy)
@@ -112,7 +112,7 @@
   <!-- End Utility Requests -->

   <request-map uri="main">
-        <security https="true" auth="false"/>
+        <security https="true" auth="true"/>
       <response name="success" type="view" value="main"/>
   </request-map>














Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to