This content has been marked as final.
Show 3 replies
-
1. Re: Authorization and web pages
abafna.bafna.amit.gmail.com Dec 16, 2008 5:55 PM (in response to vitorsouzabr)Add the restriction on pages.xml and evaluate the role to redirect as necessary.
Cheers!!!
Amit
-
2. Re: Authorization and web pages
brixtonasias Dec 17, 2008 12:14 AM (in response to vitorsouzabr)Maybe this helps. I'd put this in your .page.xml-file:
<page view-id="/reports.xhtml"> <restrict>#{s:hasRole('admin')}</restrict> </page>
For more info you might check out: Securing pages
If you're putting
@Restrict("#{s:hasRole('admin')}
on your action class - I'm not sure if it will also restrict access to the list, as the list is just reading the data, not editing it. I am a little new to Seam, so please feel free to correct me if I am talking nonsense. Thanks. -
3. Re: Authorization and web pages
vitorsouzabr Dec 17, 2008 3:18 PM (in response to vitorsouzabr)Thank you Amit and Stefan for the replies.
I forgot to mention, but I was actually trying to avoid configuring every page in pages.xml. Even with wildcards, it may get verbose. But thanks anyways. I will keep searching and decide what's best in the end.
Vítor Souza