I'm glad you figured it out.
> (…)
>
> I have a form in the allowed page and it works as expected. What did you
> mean by additional rules for forms and eventlinks?
>
Take a look at the form and evenlinks URLs, they have dots and colons.
So if you have a very strict rule like
configuration.add(f
Hi Alejandro,
the above example works ok! I moron had forgotten to remove
contributeSecurityConfiguration in DevelopmentModule which was overriding
configuration in AppModule.
Those three lines are all I need.
I have a form in the allowed page and it works as expected. What did you
mean by addit
Hi Borut
For rulling out everything but one "public" folder this configuration
should work.
configuration.add(factory.createChain("/assets/**").add(factory.anon()).build());
configuration.add(factory.createChain("/public/**").add(factory.anon()).build());
configuration.add(factory.createChain("/*
Alejandro,
I have just tried this approach with factory chains, but the solution still
eludes me. I've tried "every" variation of creating the right chain for
ruling out the index page and all other subfolders - besides one folder.
This configuration is the closest of what I think should do the j
You can annotate your pages with @WhitelistAccessOnly so that they can only
be accessed by the whitelist (eg localhost). This is how tapestry "hides"
the PageCatalog and ServiceStatus pages.
http://tapestry.apache.org/current/apidocs/org/apache/tapestry5/annotations/WhitelistAccessOnly.html
On 2
Thanks Alejandro!
Didn't know about the factory.notfound(). I will test this as soon as I can.
Cheers,
borut
2013/3/29 Alejandro Scandroli
> Hi Borut
>
> Using tapestry-security you have a couple of options.
>
> If you have all the protected/hidden pages in the same folder you
> could do some
Hi Borut
Using tapestry-security you have a couple of options.
If you have all the protected/hidden pages in the same folder you
could do something like this:
configuration.add(factory.createChain("/yourfolder/**").add(factory.notfound()).build());
If they are not in the same folder you can cre
On Fri, 29 Mar 2013 09:05:04 -0300, Borut Bolčina
wrote:
Hello,
Hi!
What is the least obtrusive way to mark pages "hidden" in production mode
or with some other configuration setting.
I'd try adding a RequestFilter and have some logic there to define whether
the request is for a hidde
Hello,
it has been a while since my last post here, but I always like to return
here on this list.
We have created a big web site (with T5 of course), and it so turns out,
that only a minor part of the pages should be launched in two weeks time
and then later some more and so on.
What is the lea
