RE: [Acegisecurity-developer] Protecting part of a JSP

2005-05-10 Thread March, Andres
Not that I don't see a use case for such a thing but it seems error prone. Would it not be better to provide generic voter support in the tags? Maybe both would be nice. I'm sure it would be nice to have a page-scoped variable to reference from each particular auth call. > right. this is why the

Re: [Acegisecurity-developer] Protecting part of a JSP

2005-05-10 Thread Ben Alex
Greg Akins wrote: 3. I don't know Acegi that well, but would be willing to add this if some folks can give me a little handholding (that is, if the to #1 is "No". That would be excellent. If you had time to make a similar change to the other taglibs and unit tests (so they maintain some consis

Re: [Acegisecurity-developer] Protecting part of a JSP

2005-05-10 Thread Greg Akins
Sounds perfect for me... 1. Any objection to this? Is it un-Acegi like? 2. I really need the feature for this project (my deadline is hours away:-( Is there an easier way, in the meantime (ie., can I access the "Authorization" from my servlet via session?) 3. I don't know Acegi that well, b

Re: [Acegisecurity-developer] Protecting part of a JSP

2005-05-10 Thread Brian Moseley
Greg Akins wrote: I thought about that... But the "protection" is based on role, and the "state" of the JSP page Basically anyone can update any field if adding a new record.. But if updating an existing record, only certain users. And the less privleged user should be able to "see" the data so I w

Re: [Acegisecurity-developer] Protecting part of a JSP

2005-05-10 Thread Greg Akins
I thought about that... But the "protection" is based on role, and the "state" of the JSP page Basically anyone can update any field if adding a new record.. But if updating an existing record, only certain users. And the less privleged user should be able to "see" the data so I wanted to use "d

Re: [Acegisecurity-developer] Protecting part of a JSP

2005-05-10 Thread Scott McCrory
On Tue, 10 May 2005 04:50:47 -0700 (PDT), Greg Akins wrote > I have a page that, from a security standpoint, is > split in two. > > The first half of the page can be updated by anyuser > if a given session attribute is set, otherwise it can > only be updated by certain users. > > The second half

[Acegisecurity-developer] Protecting part of a JSP

2005-05-10 Thread Greg Akins
I have a page that, from a security standpoint, is split in two. The first half of the page can be updated by anyuser if a given session attribute is set, otherwise it can only be updated by certain users. The second half of the page can be updated by anyone. I was thinking I should check for Au