Not long ago a very similar question was posted here. So again: The uriSecurity filter DOES NOT protect access to a page, it only handles the case if someone tries to call a URL which is blocked by the ACL. In order to block a URL go to Security > Roles and configure the anonymous role.
Hope this helps, -will http://documentation.magnolia-cms.com/administration/security/accesscontrollists.html On 05.07.2012, at 16:18, Christian Balaguer Jehle (via Magnolia Forums) wrote: > I'm facing a very strange problem atm. I deny the URI access of > /internet/TESTING/en/cug/* for the anonymous user but I still CAN access > http://dev.xx.com/dev-publish/internet/TESTING/en/cug/protected1.html > > My CompositeCallback in the uriSecurity filter looks like the example in the > CompositeCallback.java class: > [code] * <pre> > * + clientCallback > * + patterns > * + admin > * + delegate > * - class > info.magnolia.cms.security.auth.callback.FormClientCallback > * - loginForm /mgnl-resources/loginForm/login.html > * - realmName Magnolia > * - class info.magnolia.cms.util.UrlPatternDelegate > * - url /.magnolia* > * + public > * + delegate > * - class > info.magnolia.cms.security.auth.callback.FormClientCallback > * - loginForm /mgnl-resources/public-login.html > * - realmName Magnolia > * - class info.magnolia.cms.util.UrlPatternDelegate > * - url /* > * - class > info.magnolia.cms.security.auth.callback.CompositeCallback > * </pre>[/code] > > I don't get what I'm doing wrong... TT > > I also checked the Magnolia demopublic protected area. The ACL stuff I do > exactly the same way but I can't check for the CompositeCallback because in > Magnolia 4.5 it works a little bit different. I'm using Magnolia 4.4.8. > > -- > Context is everything: > http://forum.magnolia-cms.com/forum/thread.html?threadId=e6866ff7-8151-472c-9441-69f02f22e1fc > > > ---------------------------------------------------------------- > For list details, see http://www.magnolia-cms.com/community/mailing-lists.html > Alternatively, use our forums: http://forum.magnolia-cms.com/ > To unsubscribe, E-mail to: <[email protected]> > ---------------------------------------------------------------- > ---------------------------------------------------------------- For list details, see http://www.magnolia-cms.com/community/mailing-lists.html Alternatively, use our forums: http://forum.magnolia-cms.com/ To unsubscribe, E-mail to: <[email protected]> ----------------------------------------------------------------
