You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@turbine.apache.org by Th...@sp-integration.de on 2002/10/09 12:10:46 UTC

Secutity

Hello!
I have laid out a new user (without role).
With this user a Login is carried out.
Once again, I get the Login-Screen if I, however, call a link on a static 
Template.
If I call on a Template that class corresponds with one upon a link, I 
don't get the Login.
Where is the reason for it?

                                Thomas

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


Re: AW: Secutity

Posted by Th...@sp-integration.de.
Hello!

Many thanks!
SecureScreen.java even if the contents

protected boolean isAuthorized (rush data data) throws Exception {

                boolean isAuthorized = true;

                return isAuthorized;


    }

it isn't has!
I am very helpless!

                Thomas

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


AW: Secutity

Posted by Jürgen Hoffmann <jh...@byteaction.de>.
Hi,

This can have several reasons. The easiest solution is to set 

services.VelocityService.default.screen = SecureScreen

In your TR.props. And modify the isAuthorized() Method in
SecureScreen.java to your liking.

Here is a sample from my SecureScreen.java:

    protected boolean isAuthorized( RunData data )  throws Exception
    {
        boolean isAuthorized = false;

        AccessControlList acl = data.getACL();

        if ( data.getUser().hasLoggedIn() && acl != null )
        {
          isAuthorized = true;
        }
        else if( acl != null && acl.hasRole("turbine_root"))
        {
            isAuthorized = true;
        }
        else
        {
            data.setScreenTemplate(
                TurbineResources.getString("template.login"));

            isAuthorized = false;
        }
        return isAuthorized;
    }

Kind regards
 
Jürgen Hoffmann


-----Ursprüngliche Nachricht-----
Von: Thomas.Fischer@sp-integration.de
[mailto:Thomas.Fischer@sp-integration.de] 
Gesendet: Mittwoch, 9. Oktober 2002 12:11
An: turbine-user@jakarta.apache.org
Betreff: Secutity 


Hello!
I have laid out a new user (without role).
With this user a Login is carried out.
Once again, I get the Login-Screen if I, however, call a link on a
static 
Template.
If I call on a Template that class corresponds with one upon a link, I 
don't get the Login.
Where is the reason for it?

                                Thomas

--
To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
For additional commands, e-mail:
<ma...@jakarta.apache.org>



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>