Skip to content

Page instantiation protection by combined ruleset.#183

Closed
rene-d-menoto wants to merge 1 commit intoapache:wicket-7.xfrom
rene-d-menoto:wicket-7.x
Closed

Page instantiation protection by combined ruleset.#183
rene-d-menoto wants to merge 1 commit intoapache:wicket-7.xfrom
rene-d-menoto:wicket-7.x

Conversation

@rene-d-menoto
Copy link
Contributor

There is currently no way to annotate a page with instantiation rules on
multiple roles. It is possible to use an AuthorizeInstantiation. But
this can only roles using an OR ruleset.

With this annotation in use we are able to combine multiple OR rulesets
in an AND relation.

Example:
A page can be instantiate only by users with ADMIN and DATABASE role.

There is currently no way to annotate a page with instantiation rules on
multiple roles. It is possible to use an AuthorizeInstantiation. But
this can only roles using an OR ruleset.

With this annotation in use we are able to combine multiple OR rulesets
in an AND relation.

Example:
A page can be instantiate only by users with ADMIN and DATABASE role.
@martin-g
Copy link
Member

martin-g commented Nov 1, 2016

Created a ticket: https://issues.apache.org/jira/browse/WICKET-6265

@martin-g
Copy link
Member

I've cherry picked this commit and applied it at wicket-7.x with https://git1-us-west.apache.org/repos/asf?p=wicket.git;a=commit;h=14b922cd.
Git merge/rebase leads to too much noise in the commits@ mailing list.
@rene-d-menoto Thank you for the contribution! Please close this PR!

@rene-d-menoto
Copy link
Contributor Author

Thanks for merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants