Sorry, but have to also point out authsum. It has some tapestry components that also manage login/authorization, but it's very different from anything else out there.
It's a search engine for authorizations (uses's lucene to search for authorizations) and it accesses lucene via webservices. Using hessian now, but moving to xfire because I am developing a dotnet and ruby clients. The site will give you a good overview of what it is. http://www.authsum.org (apache license) If it's interesting to you, drop me a line. ----- Original Message ----- From: "Borut Bolčina" <[EMAIL PROTECTED]> To: "Tapestry users" <users@tapestry.apache.org> Sent: Tuesday, February 27, 2007 9:08:17 AM (GMT-0500) America/New_York Subject: Role based security Hello list, I was wondering if there is a better way of securing page components than using @If components (example from VirtualLibrary for Tapestry v4.0, Border.html) <span jwcid="@If" condition="ognl:admin"> <tr> <td rowspan="1" colspan="1" width="178" height="19"><img src="/vlib/images/nav/nav_6x1.png" width="178" height="19" border="0" alt="Admin"/></td> </tr> ... </span> <span jwcid="@If" condition="ognl:loggedIn"> <tr> <td rowspan="1" colspan="1" width="178" height="29"><a href="#" jwcid="logout"><img jwcid="logoutRollover" src="/vlib/images/nav/nav_10x1.png" width="178" height="29" border="0" alt="Logout"/></a></td> </tr> </span> <span jwcid="@If" condition="ognl:!loggedIn"> <tr> <td rowspan="1" colspan="1" width="178" height="29"><a href="#" jwcid="login"><img jwcid="loginRollover" src="/vlib/images/nav/nav_10x1.png" width="178" height="29" border="0" alt="Login"/></a></td> </tr> </span> I read all I could find on the list about acegi and a wiki entries starting at http://wiki.apache.org/tapestry/AcegiSpringJava5, but none of the texts mention or suggests something like <span jwcid="@Secured" role="acegi:{ROLE_USER, ROLE_ADMIN}"> <tr> <td rowspan="1" colspan="1" width="178" height="19"><img src="/vlib/images/nav/nav_6x1.png" width="178" height="19" border="0" alt="Admin"/></td> </tr> ... </span> How about creating such component? How do you guys do it? Cheers, Borut --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
