Building on the "samples\blocks\authentication-fw" sample in 2.1.8 you can use something like:

<map:match pattern="*.htm">
        <map:generate src="xml/{1}.xml"/>
         <!-- add include elements -->
         <map:transform src="stylesheets/include.xsl"/>
<!-- if this user has logged in get his id and insert it into the xml, if not the act is skipped and the cinclude is not actioned -->
           <map:act type="auth-loggedIn">
                   <map:parameter name="handler" value="wlUsers"/>
                   <map:transform type="cinclude"/>
                    <map:transform type="session"/>
            </map:act>
            <map:transform src="stylesheets/xml2htm.xslt"/>
             <map:transform type="encodeURL"/>
             <map:serialize/>
</map:match>

I also put the cinclude files in a Protected area and use both the following

1.  To get the user's id from the session
<uid xmlns:session="http://apache.org/cocoon/session/1.0";>
    <session:getxml context="authentication" path="authentication/id"/>
</uid>

2. To get other user info from database tables(too much to put it all in the session) - An xsp esql file which has its own pipeline.

Peter

While waiting on some help with the question in my previous email, I
discovered Martin Man's db-authenticator action in the
"samples/protected" directory.

Has a nifty descriptor file with a select element, which in turn has a
"to-session" attribute that lets you send whatever you want to the
session object from the db, without a lot of arcane futzing.

Any particular disadvantage to using this action?

Is everyone using CForms or what these days?

Joe


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]