Hi. For validation, if you extend BasePage and implement the validate()
method, you can do whatever you want there and throw an
exception/redirect them to a security failure page, etc.. Then just
extend that page for all "protected" pages.

Hope that helps.. should answer both questions.. you could have varying
levels of access security and extend your "SecurePage" with additional
layers.. or have a more intelligent implementation of validate() (mine
is simple, just gets the Visit and say .isAuthorized() ).

Luke Galea 
Software Development
BlueCat Networks
905-762-5225
 

-----Original Message-----
From: Lennart Benoot [mailto:[EMAIL PROTECTED]] 
Sent: December 12, 2002 9:28 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [Tapestry-developer] Web Application Platform

Hey All,

I am currently in the process of defining a web application platform to 
provide web services. We have chosen Tapestry as MVC layer. I have a few

problems I haven't been able to resolve (at least not in an elegant
way):

1) I want the whole application to be available only for logged in
users. 
We have an existing framework for security. I think when a request comes

in, the front controller servlet should check wether the user has logged

in. If not, reroute the user to the login page. How do I do this in
tapestry?

2) Authorisation is also an important part of the web app platform. I
would 
like to call some java-code whenever a new page is loaded. This code
should 
check wether the user is allowed to access the page. If the user does
not 
have the right permissions, he is rerouted to some other page. What
would 
be a good way to do this?

Thanks in advance,
Lennart



-------------------------------------------------------
This sf.net email is sponsored by:
With Great Power, Comes Great Responsibility 
Learn to use your power at OSDN's High Performance Computing Channel
http://hpc.devchannel.org/
_______________________________________________
Tapestry-developer mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/tapestry-developer


-------------------------------------------------------
This sf.net email is sponsored by:
With Great Power, Comes Great Responsibility
Learn to use your power at OSDN's High Performance Computing Channel
http://hpc.devchannel.org/
_______________________________________________
Tapestry-developer mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/tapestry-developer

Reply via email to