On Thu, Dec 29, 2011 at 5:32 PM, angelochen <angelochen...@yahoo.com.hk> wrote:
> tried tynamo's tapestry-security just a few hours, it's really a very handy
> framework.
Thanks.
> got a question, T5's annotation @Secure can be placed in a Index
> page of a package that makes all the pages @Secure, can
> @RequiresAuthentication do something similar? thanks,
It could, but currently it doesn't. You can achieve roughly the same
effect with url-based filtering, i.e:
configuration.add(factory.createChain("/**").add(factory.authc()).build());
I've long thought about creating "reverse" annotations but so far
haven't implemented them. So instead of @RequiresXXX, you could put
the application in a "very secure" mode, then poke holes in the page
security with @AllowsAnonymous etc. annotations, similar to how
firewalls are typically configured. I just hate the possibility of
accidentally leaving some doors open.
Kalle
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org
