[jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-1009) optionally login-require in a more specific page should be able to override a wildcard login-require
NSA (JIRA)
jira-events at lists.jboss.org
Wed Jul 18 20:11:55 EDT 2007
[ http://jira.jboss.com/jira/browse/JBSEAM-1009?page=comments#action_12369385 ]
NSA commented on JBSEAM-1009:
-----------------------------
Hi, I need this as well. I need to be able to override a restrict on a page-id="*" for a specific page. (In my case the login page)
> optionally login-require in a more specific page should be able to override a wildcard login-require
> ----------------------------------------------------------------------------------------------------
>
> Key: JBSEAM-1009
> URL: http://jira.jboss.com/jira/browse/JBSEAM-1009
> Project: JBoss Seam
> Issue Type: Patch
> Components: Security
> Affects Versions: 1.2.0.GA
> Environment: all
> Reporter: Leo Baschy
> Assigned To: Shane Bryzak
> Attachments: may-override-login-required.patch, may-override-login-required.patch, weaker-explicit-security.patch, weaker-explicit-security.patch
>
>
> This should be optional to switch on, so no one's existing expectations of security get broken.
> The point is about having a generic wildcard <page view-id="*" scheme="http" login-required="true"> to secure the whole site, and then allowing specific pages or specific wildcards to have login-required="false". E.g. for a registration (with preview) section as one cannot be logged in if one isn't registered yet.
> Some may suggest instead forcing pages into dedicated secure and not-secure directories, but in reality if there are multiple reasons to force pages into directories different ways (security, hyperlink management, publishability of URLs, etc.), one cannot serve all of them.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the seam-issues
mailing list