Allow configuration of URL space open without credentials
---------------------------------------------------------

                 Key: SLING-1240
                 URL: https://issues.apache.org/jira/browse/SLING-1240
             Project: Sling
          Issue Type: Improvement
          Components: Engine
    Affects Versions: Engine 2.0.6
            Reporter: Felix Meschberger


Currently the SlingAuthenticator has a single flag -- auth.annonymous -- 
defining whether anonymous access is allowed or not.

To allow for more flexibility it would be interesting to be able to partition 
the URL space into areas requiring authentication and ares not requiring 
authentication. As such the current situation just has a single area -- the 
complete URL space -- which may be configured to require authentication or not.

Such configuration may be of different form:

   * authentication handler declaring part of the URL space as requiring 
authentication
   * SlingAuthenticator configuration listing regular expressions to partition 
the URL space into authentication requiring areas.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to