Re: Allowing anonymous access per default?

[Lars Trieloff]

I will open an issue.




This can fix my issue in the meantime?

thank you,

Lars

On 28.02.2008, at 14:34, Carsten Ziegeler wrote:

Can you tell me how I set the auth.annonymous parameter that has been defined in SlingAuthenticator?

Lars Trieloff wrote:

Hi,

this behavior as currently implemented breaks microjax in web browsers. If you are posting to an URI in order to change properties, the current implementation returns with an error 500, because anonymous is not allowed to change properties. The correct error message would be 401 (forbidden). But still, the desired behavior is to ask the user for authentication if he is not authenticated and write permission is denied.

Your problem has nothing to do with the fact that we allow anonymous access per default now. Before that you could login as anonymous and would face the same problems.

Thanks
Carsten


--
Carsten Ziegeler
[EMAIL PROTECTED]

This is rather a problem of the post servlet and the permission checking there. Could you please open an issue?

--
Lars Trieloff
[EMAIL PROTECTED]
http://weblogs.goshaky.com/weblogs/lars

smime.p7s
Description: S/MIME cryptographic signature