Hi,

I would like to ask a few question regarding wicket-security.
I got my wicket page up&running with basic auth and two principals. However, I'm not using login page but login panel which is in header of all pages. What I did is that I have HeaderFooter class (contains condition that makes the login panel or logout link invisible based on isUserAuth.. method of WaspSession) which is superclass of HomePage where the user is supposed to login. And then I have the same SecureHeaderFooter which contains only logout link and that is superclass of all secure pages. I don't like this pretty much so I'm trying to figure auth something like component based security. That non-authenticated user should see login panel in the header and authenticated the logout link. Second question is, when i tried to access secured page from homepage it just refreshed the page as long as i was not logged in -- how do I propagate this "access denied" message so user can see it. Because when I logged in and tried to access page where my principal did not have rights I got orange wicket access denied page.

Thanks in advance & regards

--
Marek Šabo
Chief Server Manager
Club SU CVUT Buben
Bubenečská Kolej
Terronská 28, Prague 16000
XMPP: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to