Doug Chestnut wrote:
Hi Devs,
is there a way to restrict access to the
publication.createPublicationFromTemplate usecase in 1.4 by user/group?
Seems like the only way would be to remove it when not needed since it
is outside of the publication context (where users/groups exist).
A secure way would be the following:
- Override the usecase handler with a custom usecase handler which checks
if it is invoked from inside a publication
- Set the appropriate permissions in usecase-policies.xml
- Add the menu item if desired
- Remove the original usecase from cocoon.xconf
This way, you can be sure that new publications can only be created
by particular users / groups.
-- Andreas
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
