Hi,
I would like to ask a few question regarding wicket-security.
I got my wicket page up&running with basic auth and two principals.
However, I'm not using login page but login panel which is in header of
all pages. What I did is that I have HeaderFooter class (contains
condition that makes the login panel or logout link invisible based on
isUserAuth.. method of WaspSession) which is superclass of HomePage
where the user is supposed to login. And then I have the same
SecureHeaderFooter which contains only logout link and that is
superclass of all secure pages. I don't like this pretty much so I'm
trying to figure auth something like component based security. That
non-authenticated user should see login panel in the header and
authenticated the logout link.
Second question is, when i tried to access secured page from homepage it
just refreshed the page as long as i was not logged in -- how do I
propagate this "access denied" message so user can see it. Because when
I logged in and tried to access page where my principal did not have
rights I got orange wicket access denied page.
Thanks in advance & regards
--
Marek Šabo
Chief Server Manager
Club SU CVUT Buben
Bubenečská Kolej
Terronská 28, Prague 16000
XMPP: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]