GitHub user rene-d-menoto opened a pull request:
https://github.com/apache/wicket/pull/184
Page instantiation protection by combined ruleset.
There is currently no way to annotate a page with instantiation rules on
multiple roles. It is possible to use an AuthorizeInstantiation. But
this can only roles using an OR ruleset.
With this annotation in use we are able to combine multiple OR rulesets
in an AND relation.
Example:
A page can be instantiate only by users with ADMIN and DATABASE role.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/rene-d-menoto/wicket wicket-6.x
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/wicket/pull/184.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #184
----
commit 1a02ae522e965de9aff07e8fed72260b716796ce
Author: René Dieckmann <[email protected]>
Date: 2016-10-13T12:40:58Z
Page instantiation protection by combined ruleset.
There is currently no way to annotate a page with instantiation rules on
multiple roles. It is possible to use an AuthorizeInstantiation. But
this can only roles using an OR ruleset.
With this annotation in use we are able to combine multiple OR rulesets
in an AND relation.
Example:
A page can be instantiate only by users with ADMIN and DATABASE role.
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
