On 7/1/10 9:19 AM, Vidar Ramdal wrote:
> On Thu, Jul 1, 2010 at 1:52 PM, Ian Boston <i...@tfd.co.uk> wrote:
>> Hi,
>> I want to be able to stop the listing of all child nodes at specific urls, 
>> but still allow direct access to items in a subtree.
>> Any ideas how this is best done in Sling? (and webdav)
>>
>> I have lots, but dont know which is going to be best.
>> eg
>> Use a ServletFilter to filter all access to /_user
>> Patch/Configure webdav to only PROPFIND etc /_user/ieb if ieb is the logged 
>> in user.
>> [...]
> 
> This would be fairly easy to implement using a custom AccessManager.
> But maybe that is not an option.
> 
Could you expand on this? AFAIK, AccessManager doesn't know the context
of an access request, which I think is what Ian is describing. Would you
use a ThreadLocal to store the current (Sling)HttpServletRequest?

Reply via email to