Ben, Thanks for your advice. I have successfuly protected all my Tapestry pages except Login page using the channel security using just one prefix for Tapestry servlet (/app) and avoiding the need to protect the secured pages by PageValidateListener. It seems to be a good option for Tapestry users.
Best regards, Karel ----- Original Message ----- From: "Ben Alex" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 08, 2004 2:02 PM Subject: RE: [Acegisecurity-developer] why auth user is required before access decision voters are called in HTTP request security? > Hi Karel > > > Why I cannot create my own voters based on just the > ConfigAttributeDefinition or for example > > IP address from which the request comes? I think that authorized user is > needed only for > > RoleVoter. > > If you need IP address restrictions or similar which are not specific to a > given user, take a look at the channel security capabilities in > net.sf.acegisecurity.securechannel. Does that meet your needs? > > HTH > Ben > > > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: GNOME Foundation > Hackers Unite! GUADEC: The world's #1 Open Source Desktop Event. > GNOME Users and Developers European Conference, 28-30th June in Norway > http://2004/guadec.org > _______________________________________________ > Acegisecurity-developer mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer > > ------------------------------------------------------- This SF.Net email is sponsored by: GNOME Foundation Hackers Unite! GUADEC: The world's #1 Open Source Desktop Event. GNOME Users and Developers European Conference, 28-30th June in Norway http://2004/guadec.org _______________________________________________ Acegisecurity-developer mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
