Re: [T5] Restricting Page Access

2007-08-28 Thread Erik Vullings
That's really cool and very useful! To clarify my understanding - how does it deal with protecting links/functions. For example, assume I'm a regular, non-admin user and access the application. Since I'm not an admin, I don't see the link to the Clear database function, but somehow, I can guess

Re: [T5] Restricting Page Access

2007-08-28 Thread Robin Helgelin
On 8/28/07, Erik Vullings [EMAIL PROTECTED] wrote: To clarify my understanding - how does it deal with protecting links/functions. For example, assume I'm a regular, non-admin user and access the application. Since I'm not an admin, I don't see the link to the Clear database function, but

Re: [T5] Restricting Page Access

2007-08-27 Thread Robin Helgelin
On 8/26/07, Charles Mason [EMAIL PROTECTED] wrote: I have made my own worker class, annotation and service. I understand the acegi worker class except for the transform page part. I can't work out how its managing to change the page. Its clearly modifying a method but, I cant really work out

Re: [T5] Restricting Page Access

2007-08-27 Thread Erik Vullings
Hi, Just wondering - when dealing with page authorizations, does this model expand to component authorizations, i.e. you may visit the page, but not certain components (redirect to another component), or you can see a component, but with less privileges (e.g. view but not edit). In other words,

Re: [T5] Restricting Page Access

2007-08-27 Thread Robin Helgelin
On 8/27/07, Erik Vullings [EMAIL PROTECTED] wrote: Hi, Just wondering - when dealing with page authorizations, does this model expand to component authorizations, i.e. you may visit the page, but not certain components (redirect to another component), or you can see a component, but with

Re: [T5] Restricting Page Access

2007-08-26 Thread Charles Mason
On 8/25/07, Nick Westgate (Work) [EMAIL PROTECTED] wrote: Also, just as a reminder, base classes must not go in the pages package. I thinks that's where my RistrictedPage class was going wrong. I think I will play around with trying to create some tapestry5-acegi like annotations and request

Re: [T5] Restricting Page Access

2007-08-26 Thread Charles Mason
On 8/24/07, Robin Helgelin [EMAIL PROTECTED] wrote: To ask your second question, the code tapestry5-acegi uses to wrap around the class is found here in this service:

[T5] Restricting Page Access

2007-08-24 Thread Charles Mason
Firstly I just want to say Tapestry 5 is amazing, Tapestry 4 was very good but Tapestry 5 is outstanding. One thing I haven't figured out how to do the Tapestry 5 way is controlling page access. On many sites I write there is often a need to password protect a large number of pages. The way I

Re: [T5] Restricting Page Access

2007-08-24 Thread Robin Helgelin
On 8/24/07, Charles Mason [EMAIL PROTECTED] wrote: @Secured(ROLE_ADMIN) public class AdminPage { } I was wondering how this worked. I am assuming its through some sort of T5 service. I was looking at the documentation on the T5 site, although I can't figure how to do something like that. I

Re: [T5] Restricting Page Access

2007-08-24 Thread César Lesc
If you have a base class for your protected pages then onActivate event will trigger first on the parent then in the child if return value of the parent onActivate event is null. This work fine in my project, I don´t use any annotation for this just declare: public abstract class SecurePage{

Re: [T5] Restricting Page Access

2007-08-24 Thread César Lesc
A little mistake myPage MUST extends SecurePage of course :) On 8/24/07, César Lesc [EMAIL PROTECTED] wrote: If you have a base class for your protected pages then onActivate event will trigger first on the parent then in the child if return value of the parent onActivate event is

Re: [T5] Restricting Page Access

2007-08-24 Thread Nick Westgate (Work)
this message in context: http://www.nabble.com/-T5--Restricting-Page-Access-tf4325658.html#a12321896 Sent from the Tapestry - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional