Hello,

I have been struggling all day with an issue. I am sure there must be some 
easy solution that lots have already implemented as it looks to me as a 
basic setup.

I am building an app with GWT and appengine using requestfactory. This app 
has some "pages" (they are actually MVP views) that everybody should have 
access to. It's like the home page and a couple of views where the service 
we provide is described. Then if you want to use the service you have to 
login (with google accounts and all that). Only being logged in you have 
access to the rest of the views (pages) in the app. The question is, how to 
handle this?, the fact that some pages and some requestfactory calls are 
public and some other have to be available to those that have logged in?

I have already discarded the auth-constraints tags in web.xml because they 
work with all or nothing.

The next alternative was to use servlet filters (as the expenses demo does). 
That could work, but only if the "open" or not secured pages didn't need to 
access any data from appengine datastore (and I don't want to close that 
door, maybe in the future I want to show status or number of users, etc 
etc). The reason for this is that with request factory you only have one 
servlet so if you put a filter you shut down all comunication with appengine 
if the user is not logged in.

I was thinking of implementing this filter, with requesfactory for all the 
stuff once the user is logged in and also implement some RPC services for 
the data i might want to display in the "home or information pages" that i 
might need to retrieve from the datastore. However it looks a bit overkill 
for me.

Anyone had the same problem? any ideas?

I'd appreciate any help on this.

Thanks,

Miguel

-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-web-toolkit/-/GmdSq5FlyckJ.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.

Reply via email to