For checking permissions, the sec:checkPermission tag is probably the best bet. What version of FarCry are you using? I remember that there was bug in an earlier version where checks on HTML pages were not checking the corresponding parents as well.
Blair 2009/7/15 Tomek Kott <[email protected]> > Hi All, > > I recently added a secure section under a navigation node that uses the > ruleChildLinks rule from FarCryCMS plugin. The navigation items on the same > page separate from the rule display correctly (i.e., hide the secure node > for anonymous users). The child links rule however, doesn't seem to check > object permissions. I figured adding and if statement using: > > > application.fapi.checkObjectPermission(objectid="#stObjTemp.objectid#",permission="view") > > before every <skin:view> tag would do the trick, but it seems to fail by > not displaying anything. I remember that checking permissions in the > navigation tree is a little more tricky, but I was wondering what the best > way to get the permitted child items were. Right now it looks like it > essentially uses: > > <cfset qGetChildren = > application.factory.oTree.getChildren(objectid=request.navid) /> > > Which I don't believe checks permissions. Is there a getAllowedChildren > function or somewhere where I can look at a simple way to secure things? > > It's odd, because getChildren seems to get straight at the dmHTML objects > underneath the navigation node, not the dmNavigation items to check their > permissions. > > Any help in clarifying or pointing a way to go would be great! Thanks, > > Tomek > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message cos you are subscribed to "farcry-dev" Google group. To post, email: [email protected] To unsubscribe, email: [email protected] For more options: http://groups.google.com/group/farcry-dev -------------------------------- Follow us on Twitter: http://twitter.com/farcry -~----------~----~----~----~------~----~------~--~---
