I realized just after posting this, that it probably belongs in the users
list, but thanks for replying just the same.
I understand what you are saying, however, I have been quite unsuccessful in
adding a RoleAuthorizationStrategy to my app (which already has
authentication working).
I was under the assumption that I could remove all of my
@AuthorizeInstantiation("ADMIN") annotations from individual page classes,
and instead simply use
MetaDataRoleAuthorizationStrategy.authorize(MyPage.class, "ADMIN");
from within my apps init() method. When I do that though, I'm no longer
prompted to sign in, and I get a null pointer in my RolesAuthorizor because
there is no user object in the session (because I never signed in). Am I
wrong about this? Do I still need to use the annotations on individual Page
classes to invoke my authentication scheme?
igor.vaynberg wrote:
>
> authentication and authorization are orthogonal, so you can have whatever
> two mechanisms you want working side by side and they should not interfere
> with each other
>
> -igor
>
>
> On 4/6/07, fattymelt <[EMAIL PROTECTED]> wrote:
>>
>>
>> I have seen the example projects for both Authentication (sign-in) and
>> Authorization (roles) but have yet to come across one that shows both. I
>> have an app set up with Authentication enabled (essentially copied from
>> the
>> Authentication example) and I would like to add role functionality that I
>> see in the Authorization example.
>>
>> Does anyone know if an example exists that shows these two security
>> frameworks working side-by-side? Or can anyone explain how I might add
>> the
>> Authorization mechanisms to my existing app?
>>
>> Thanks!
>> --
>> View this message in context:
>> http://www.nabble.com/Authentication-%2B-Authorization-Example-Tutorial-tf3539559.html#a9880680
>> Sent from the Wicket - Dev mailing list archive at Nabble.com.
>>
>>
>
>
--
View this message in context:
http://www.nabble.com/Authentication-%2B-Authorization-Example-Tutorial-tf3539559.html#a9880818
Sent from the Wicket - Dev mailing list archive at Nabble.com.
