Re: user access control

2007-09-22 Thread Chris Lewis
Ok I realize this thread has been dormant for a while, but I'm back to the issue again. First of all I neglected to mention the first time that I'm using T5. Siddhartha, I dug into MasterDispatcher after finding it and thinking this was how it could be done, but I haven't figured it out yet. I'

Re: user access control

2007-07-19 Thread Chris Lewis
Andrea, I will look more into JFly, but those from 2 files I can't see any authentication/access control happening. Again, I am just getting started with Tap, so my oversight is likely due to that. thanks again chris Andrea Chiumenti wrote: like mine :), anyway On 7/18/07, Siddhartha

Re: user access control

2007-07-18 Thread Andrea Chiumenti
like mine :), anyway On 7/18/07, Siddhartha Argollo <[EMAIL PROTECTED]> wrote: I think so too. My solution was to contribute to MasterDispatcher with a SecurityDispatcher, that is responsible to verify if the user is authenticated, before he has access to a page. It is a request filter, bu

Re: user access control

2007-07-18 Thread Siddhartha Argollo
I think so too. My solution was to contribute to MasterDispatcher with a SecurityDispatcher, that is responsible to verify if the user is authenticated, before he has access to a page. It is a request filter, but inside the tapestry framework, not a servlet filter. Chris Lewis wrote: I apolog

Re: user access control

2007-07-18 Thread Andrea Chiumenti
rote: >> >> >> yes for every Q! >> >> >> >> >> >> "It looks like this method checks against a role list in the >> >> deplyment >> >> >> descriptor" -> JAAS (if u mean web.xml) >> >> >> >

Re: user access control

2007-07-18 Thread Chris Lewis
urity checks perms and handles enforcement, correct? >> >>> Regarding jaas, I've not used it before, but the >> >>> HttpServletRequest#isUserInRole method uses it? It looks like this >> >>> method checks against a role list in the deplyment descr

Re: user access control

2007-07-18 Thread Andrea Chiumenti
>> the >> >>> security checks perms and handles enforcement, correct? >> >>> Regarding jaas, I've not used it before, but the >> >>> HttpServletRequest#isUserInRole method uses it? It looks like this >> >>> method check

Re: user access control

2007-07-18 Thread Chris Lewis
uses it? It looks like this >>> method checks against a role list in the deplyment descriptor. >>> >>> Thanks tons for your input! >>> >>> chris >>> >>> Andrea Chiumenti wrote: >>> > do u want jaas ? >>> > if so: >>> >

Re: user access control

2007-07-18 Thread Andrea Chiumenti
inst a role list in the deplyment descriptor. >>> >>> Thanks tons for your input! >>> >>> chris >>> >>> Andrea Chiumenti wrote: >>> > do u want jaas ? >>> > if so: >>> > >>> > in ur code: >>>

Re: user access control

2007-07-17 Thread damien
hecks against a role list in the deplyment descriptor. >>> >>> Thanks tons for your input! >>> >>> chris >>> >>> Andrea Chiumenti wrote: >>> > do u want jaas ? >>> > if so: >>> > >>> > in ur code: &g

Re: user access control

2007-07-17 Thread Chris Lewis
ewis wrote: >> > Hello all, >> > >> > I am seeking information/code samples on how to implement user access >> > control in Tapestry (4.1.2). Specifically, restricting pages to >> > authenticated users. I assume that all restricted pages would have to

Re: user access control

2007-07-17 Thread Andrea Chiumenti
t; do u want jaas ? > if so: > > in ur code: > > getRequest().isUserInRole('somerole'); > > Ciao, > kiuma > > On 7/17/07, Damien Uern <[EMAIL PROTECTED]> wrote: >> >> Chris Lewis wrote: >> > Hello all, >> > >> > I am

Re: user access control

2007-07-17 Thread Chris Lewis
nformation/code samples on how to implement user access > control in Tapestry (4.1.2). Specifically, restricting pages to > authenticated users. I assume that all restricted pages would have to > make a call to an authentication system, checking if the user is logged > in and if they h

Re: user access control

2007-07-16 Thread Andrea Chiumenti
do u want jaas ? if so: in ur code: getRequest().isUserInRole('somerole'); Ciao, kiuma On 7/17/07, Damien Uern <[EMAIL PROTECTED]> wrote: Chris Lewis wrote: > Hello all, > > I am seeking information/code samples on how to implement user access > control in Ta

Re: user access control

2007-07-16 Thread Damien Uern
Chris Lewis wrote: > Hello all, > > I am seeking information/code samples on how to implement user access > control in Tapestry (4.1.2). Specifically, restricting pages to > authenticated users. I assume that all restricted pages would have to > make a call to an authenticatio

user access control

2007-07-16 Thread Chris Lewis
Hello all, I am seeking information/code samples on how to implement user access control in Tapestry (4.1.2). Specifically, restricting pages to authenticated users. I assume that all restricted pages would have to make a call to an authentication system, checking if the user is logged in