[FLOW3-general] Security Framework: access on resource for not logged user
Robin Lehrmann
role at vkf-renzel.de
Tue Oct 16 08:32:31 CEST 2012
Hello together!
I have a login page. If the user has the 'Anonymous' role, he can access
on the Login page.
The Employee role cannot access on the login page.
My Policy.yaml:
roles:
# Anonymous: []
Employee: []
NewsletterAdministrator: [Employee]
CustomerAdministrator: [Employee]
ArticleAdministrator: [Employee]
GalleryAdministrator: [Employee]
Administrator: [Employee]
resources:
methods:
Login_Methods:
'method(Pkg\Authenticator\Controller\LoginController->(login|authenticate)Action())'
Logout_Method:
'method(Pkg\Authenticator\Controller\LoginController->logoutAction())'
acls:
Anonymous:
methods:
Login_Methods: GRANT
Employee:
methods:
Logout_Method: GRANT
Im not logged in on my page and get a redirection error. I dont
understand it, because if I var_dump:
/**
* @Flow\Inject
* @var \TYPO3\Flow\Security\Context
*/
protected $securityContext;
public methodAction() {
var_dump($this->securityContext->getRoles());
}
I get two roles: Everybody and Anonymous. Please help me.
More information about the FLOW3-general
mailing list