There are other ways, but they are probably a bit more complicated. The
rule states: hasIpAddress('${cas.securityContext.status.allowedSubnet}')But you could swap that rule out for any number of the following expressions: http://docs.spring.io/spring-security/site/docs/3.0.x/reference/el-access. html From: Whittaker, Geoffrey [mailto:[email protected]] Sent: Monday, April 13, 2015 7:02 AM To: [email protected] Subject: RE: [cas-user] View Statistics Page Gone in v4? Thank you for pointing that out. Interesting that there's no other way to control access to that page than IP. I appreciate the fleetness of your response. Geoff From: Dmitriy Kopylenko [mailto:[email protected]] Sent: Monday, April 13, 2015 9:37 AM To: [email protected] <mailto:[email protected]> Subject: Re: [cas-user] View Statistics Page Gone in v4? Yes, it is. https://github.com/Jasig/cas/blob/v4.0.1/cas-server-webapp/src/main/webapp /WEB-INF/spring-configuration/securityContext.xml#L39 Cheers, D. On Apr 13, 2015, at 9:18 AM, Whittaker, Geoffrey <[email protected] <mailto:[email protected]> > wrote: What controls access to that? Is it, cas.securityContext.status.allowedSubnet in my cas.properties file? -- You are currently subscribed to [email protected] <mailto:[email protected]> as: [email protected] <mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] <mailto:[email protected]> as: [email protected] <mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
