Hi All,

I recently added a secure section under a navigation node that uses the
ruleChildLinks rule from FarCryCMS plugin. The navigation items on the same
page separate from the rule display correctly (i.e., hide the secure node
for anonymous users). The child links rule however, doesn't seem to check
object permissions. I figured adding and if statement using:

application.fapi.checkObjectPermission(objectid="#stObjTemp.objectid#",permission="view")

before every <skin:view> tag would do the trick, but it seems to fail by not
displaying anything. I remember that checking permissions in the navigation
tree is a little more tricky, but I was wondering what the best way to get
the permitted child items were. Right now it looks like it essentially uses:

<cfset qGetChildren =
application.factory.oTree.getChildren(objectid=request.navid) />

Which I don't believe checks permissions. Is there a getAllowedChildren
function or somewhere where I can look at a simple way to secure things?

It's odd, because getChildren seems to get straight at the dmHTML objects
underneath the navigation node, not the dmNavigation items to check their
permissions.

Any help in clarifying or pointing a way to go would be great! Thanks,

Tomek

--~--~---------~--~----~------------~-------~--~----~
You received this message cos you are subscribed to "farcry-dev" Google group.
To post, email: [email protected]
To unsubscribe, email: [email protected]
For more options: http://groups.google.com/group/farcry-dev
--------------------------------
Follow us on Twitter: http://twitter.com/farcry
-~----------~----~----~----~------~----~------~--~---

Reply via email to