Sorry, I missed a question. I guess I assumed:

5. Is most of your Auth stuff in app_controller?

If so, then you are a required (I think) call parent::beforeFilter() in
every controller where you override the beforeFilter().

This is because you are essentially nullifying everything you did in
app_controller() if you don't.

As, I said before. IE sucks, it caches stuff it shouldn't be. If you insist
on using it for testing, on the action that should not be allowed: refresh
the browser and see what happens.

On Feb 13, 2008 8:04 PM, Rod D. <[EMAIL PROTECTED]> wrote:

>
> Baz,
> Yes, I am running IE7 on Windows XP Pro.
>
> Missed the 4 questions earlier... sorry a bout that.
>   1. Is $this->Auth->autoRedirect = false ???
>   No, I never changed this setting.  I just double checked at run
> time, and it is True.
>
>   2. In your controllers are you overriding beforeFilter?
>   Yes, I will post the BeforeFilter below.
>   3. If yes to 2. are you calling parent::beforeFilter()?
>   No.
>   4. If yes to 1. are you calling ? $this->Auth->logout() ???
>   Not applicable.
>
> The following is in the Users controller:
>        function beforeFilter() {
>                $this->Auth->allow('register');
>        }
>
> So, the above code I expect to allow the register controller to bypass
> authorization.  (In other words, the register controller would be
> public.)
>
> Maybe I should just post my entire users controller to the list?
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to