hi all,
I did some test to implement a guest auto login with swarm/wasp. I'm
just not sure if I'm digging in the right direction.
my scenario is the following:
- all pages are implementing the interface ISecurePage
- all pages are grouped in different principals (hive)
- i have an admin gui for setting principals for an individual user
main goal is, that we can set for each page if you need to be logged in
or not, depend on the user self, means we can have certain pages public
depend on the scenario.
what i did so fare:
- implemented 2 LoginContext, one for the guest and one for the acutal
login if a user needs to be logged in!
- to do the auto login, i did a login( new GuestLoginContext()) when the
session is created, on that way, the webuser can access all principals
which are assigned to this special user 'guest'.
- additionally the GuestLoginContext has his own Subject implementation
which i override isClassAuthenticated(Class class1) to check if the
guest user is allowed to access the class, currently i use the following
getStrategy().isClassAuthorized(class1,
getActionFactory().getAction(Access.class));
I'm not sure if this is a way to go to implement such a scenario. If
someone else implemented a similar scenario, I'm happy to get some more
advice.
thanks gab
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
