I have been looking at the AccessControllerResolver interface. I found
some documentation at
http://lenya.apache.org/docs/1_2_x/components/accesscontrol/accesscontrollerresolvers.html
On this page, it shows a configuration segment under the heading
"Declaring the Access Controller Resolvers in cocoon.xconf". I found
this configuration in access-controller-resolver.xconf.
However, I also found in the AccessControllerResolver interface the
following declaration:
/**
* The name of the default resolver to use.
*/
String DEFAULT_RESOLVER = "publication";
I did some testing in the eclipse debugger to confirm that the
PublicationAccessControllerResolver is the only one ever used. So why
do the other resolvers exist? Is it something left over from lenya 1.2
or is there something I'm missing?
The Publication AC resolver returns an AccessController based purely
on the publication name in the http request -
http://server:port/PUBNAME/index.html. Any requests to the lenya
welcome page to not contain a publication name, and the Publication AC
resolver returns null. AccessControlAction permits access it cannot
get an AccessController.
What would be the best way to get an AccessController for the welcome
page? I only want authenticated users to be able to access this page.
I will then make a simple jx template to show only publications that
the user has access.
Michael Ralston
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
