Hi. For validation, if you extend BasePage and implement the validate() method, you can do whatever you want there and throw an exception/redirect them to a security failure page, etc.. Then just extend that page for all "protected" pages.
Hope that helps.. should answer both questions.. you could have varying levels of access security and extend your "SecurePage" with additional layers.. or have a more intelligent implementation of validate() (mine is simple, just gets the Visit and say .isAuthorized() ). Luke Galea Software Development BlueCat Networks 905-762-5225 -----Original Message----- From: Lennart Benoot [mailto:[EMAIL PROTECTED]] Sent: December 12, 2002 9:28 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Tapestry-developer] Web Application Platform Hey All, I am currently in the process of defining a web application platform to provide web services. We have chosen Tapestry as MVC layer. I have a few problems I haven't been able to resolve (at least not in an elegant way): 1) I want the whole application to be available only for logged in users. We have an existing framework for security. I think when a request comes in, the front controller servlet should check wether the user has logged in. If not, reroute the user to the login page. How do I do this in tapestry? 2) Authorisation is also an important part of the web app platform. I would like to call some java-code whenever a new page is loaded. This code should check wether the user is allowed to access the page. If the user does not have the right permissions, he is rerouted to some other page. What would be a good way to do this? Thanks in advance, Lennart ------------------------------------------------------- This sf.net email is sponsored by: With Great Power, Comes Great Responsibility Learn to use your power at OSDN's High Performance Computing Channel http://hpc.devchannel.org/ _______________________________________________ Tapestry-developer mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/tapestry-developer ------------------------------------------------------- This sf.net email is sponsored by: With Great Power, Comes Great Responsibility Learn to use your power at OSDN's High Performance Computing Channel http://hpc.devchannel.org/ _______________________________________________ Tapestry-developer mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/tapestry-developer