Hi,

Also, you'll have to consider doing security checks for submission of
forms on those pages -- just because you don't display them does not prevent
people from invoking them.

Regards,
Daniel

On Fri, 4 Jun 2004, Jeffery Painter wrote:

>
> You can use the $data object to test for user roles and permissions as
> well
>
> velocity template code:
> -----------------------
>
> #if ( $data.getUser().hasLoggedIn() )
>
>   #if ( $data.getACL().hasRole("sales") )
>        // javascript to add sales role options...
>          d.add(1,0,'Orders', '$link.setPage("orders,Status.vm")');
>          d.add(2,0,'Customers' );
>   #end
>
>   #if ( $data.getACL().hasPermission("inventory") )
>       // some inventory function here...
>
>   #end
>
> #end
>
>
>  Jeff Painter
>
>
>
> On Fri, 4 Jun 2004, Melanie Philpot wrote:
>
> > Thanks but I'm not using the antelope project, it sounds good but for now I just 
> > want the bog standard turbine skin details
> >
> > -----Original Message-----
> > From: Jones Michael, Slough [mailto:[EMAIL PROTECTED]
> > Sent: 04 June 2004 14:35
> > To: Turbine Users List
> > Subject: RE: changing the layout - skins
> >
> >
> > There is a security pull tool in the Antelope project
> > (http://zebra.tigris.org/) that allows you (amongst other things) to check
> > permissions in your velocity pages. The means you can show or hide certain
> > elements of the page depending on you ACL.
> > Mike
> >
> > -----Original Message-----
> > From: Melanie Philpot [mailto:[EMAIL PROTECTED]
> > Sent: 04 June 2004 11:28
> > To: Turbine User (E-mail)
> > Subject: changing the layout - skins
> >
> > Can anyone give me some pointers on how to change the layout, e.g. need to
> > disable certain links depending who is logged in
> > Do I use skins for this?
> >
> > Thanks
> >
> > Melanie
> >
> > ===========================================================
> > Melanie Philpot
> > Web Developer
> > Central Government Division
> > Anite Public Sector
> > 110 Fleet Road
> > Fleet
> > Hampshire
> > GU51 4BL
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to