I'm working with DataSourceRealm & Tomcat container managed security, on the public instance, not Magnolia security.
I inquired at one point if anyone actually uses Magnolia's security mechanism to constrain resources for their normal web users, as opposed to contributors/authors, but got no answer. Does it scale well for 1000 users? 1,000,000 users? What's the limit? Who knows? I assume its not suitable for that. I only set up security-constraints in publics' web.xml, but yes, when you run this code while logged in the author environment the principals roles do come from Magnolia security and don't correspond with what you get when you hit the website tree running on public & constrained by Tomcat, but I'm more concerned with what happens on the public side. -----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] Sent: Friday, April 07, 2006 2:00 AM To: [email protected] Subject: Re: [magnolia-user] experience with building custom navigations On 06.04.2006, at 17:47, Robert Van Overmeiren wrote: > Some of us have taken that nav class out of the tag, set it up to run > in a JSP scriptlet, and included the JSP in place of the tag. > My version has two extra methods. One reads the webapps security > constraints, the other gets the users roles. Then if the user doesn't > have access to a resource, he doesn't get the link. > > http://www.magnolia.info/wiki/Wiki.jsp? > page=AutoNavigationClassWithProtectedMode I don't quite get it - if a role has no access to a page, it will not show up in the simple navigation nor anywhere else. What exactly does your tag do that is not already done by using the mechanisms provided by Magnolia? Thanks - Boris ---------------------------------------------------------------- for list details see http://www.magnolia.info/en/magnolia/developer.html ---------------------------------------------------------------- ---------------------------------------------------------------- for list details see http://www.magnolia.info/en/magnolia/developer.html ----------------------------------------------------------------
