using 5.1.4 at the moment. I'll take a look at sec:checkPermission and see if that does a more thorough job checking things
Tomek On Tue, Jul 14, 2009 at 7:56 PM, Blair McKenzie <[email protected]> wrote: > For checking permissions, the sec:checkPermission tag is probably the best > bet. What version of FarCry are you using? I remember that there was bug in > an earlier version where checks on HTML pages were not checking the > corresponding parents as well. > > Blair > > 2009/7/15 Tomek Kott <[email protected]> > > Hi All, >> >> I recently added a secure section under a navigation node that uses the >> ruleChildLinks rule from FarCryCMS plugin. The navigation items on the same >> page separate from the rule display correctly (i.e., hide the secure node >> for anonymous users). The child links rule however, doesn't seem to check >> object permissions. I figured adding and if statement using: >> >> >> application.fapi.checkObjectPermission(objectid="#stObjTemp.objectid#",permission="view") >> >> before every <skin:view> tag would do the trick, but it seems to fail by >> not displaying anything. I remember that checking permissions in the >> navigation tree is a little more tricky, but I was wondering what the best >> way to get the permitted child items were. Right now it looks like it >> essentially uses: >> >> <cfset qGetChildren = >> application.factory.oTree.getChildren(objectid=request.navid) /> >> >> Which I don't believe checks permissions. Is there a getAllowedChildren >> function or somewhere where I can look at a simple way to secure things? >> >> It's odd, because getChildren seems to get straight at the dmHTML objects >> underneath the navigation node, not the dmNavigation items to check their >> permissions. >> >> Any help in clarifying or pointing a way to go would be great! Thanks, >> >> Tomek >> >> >> > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message cos you are subscribed to "farcry-dev" Google group. To post, email: [email protected] To unsubscribe, email: [email protected] For more options: http://groups.google.com/group/farcry-dev -------------------------------- Follow us on Twitter: http://twitter.com/farcry -~----------~----~----~----~------~----~------~--~---
