I figured this out. I had my Auth stuff in the AppController beforeFilter(). By adding the blackHole stuff to the child controller's beforeFilter, I was overriding the AppController's before filter (which allowed access to *). Issue was resolved by adding "parent::beforeFilter()" in the child controller's beforeFilter.
On Oct 30, 10:39 am, CharlesTMunger <[email protected]> wrote: > You know, I actually think just by including Security as a component, > it makes my whole controller require Auth. With nothing added but > Security as a component, I can no longer access the controller pages - > I get redirected to my login page and a message ""You are not > authorized to access that > location." > > If I log in the forceSSL and everything works perfectly. Does this > make any sense? > > On Oct 30, 12:23 am, CharlesTMunger <[email protected]> wrote: > > > I put the following code in one of my controllers, trying to force it > > to use SSL: > > > function beforeFilter() { > > $this->Security->blackHoleCallback = 'forceSSL'; > > $this->Security->requireSecure(); > > } > > > function forceSSL() { > > $this->redirect('https://' . $_SERVER['SERVER_NAME'] . > > $this->here); > > } > > > But whenever I go to a page using this controller, I get redirected to > > my login page with the message "You are not authorized to access that > > location." > > > I am using Auth in my appcontroller. I'm guessing that has something > > to do with it. But for the life of me I cannot figure it out. > > > This is the code in my AppController for Auth: > > > $this->Auth->fields = array('username' => 'email', > > 'password' => 'password'); > > //$this->Auth->loginAction = array('controller' => 'users', > > 'action' > > => 'login'); > > $this->Auth->loginRedirect = '/'; > > $this->Auth->logoutRedirect = '/'; > > $this->Auth->allow('*'); > > $this->Auth->loginError = 'Invalid e-mail / password > > combination. > > Please try again'; > > $this->Auth->autoRedirect = false; > > > $this->Auth->authorize = 'controller'; --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
