[FLOW3-general] Security Framework: access on resource for not logged user

Robin Lehrmann role at vkf-renzel.de
Tue Oct 16 08:32:31 CEST 2012


Hello together!

I have a login page. If the user has the 'Anonymous' role, he can access 
on the Login page.
The Employee role cannot access on the login page.

My Policy.yaml:

roles:
#  Anonymous: []
   Employee:    []
   NewsletterAdministrator:    [Employee]
   CustomerAdministrator:    [Employee]
   ArticleAdministrator:    [Employee]
   GalleryAdministrator:    [Employee]
   Administrator:    [Employee]

resources:
   methods:
     Login_Methods: 
'method(Pkg\Authenticator\Controller\LoginController->(login|authenticate)Action())'
     Logout_Method: 
'method(Pkg\Authenticator\Controller\LoginController->logoutAction())'

acls:
   Anonymous:
     methods:
       Login_Methods: GRANT
   Employee:
     methods:
       Logout_Method: GRANT

Im not logged in on my page and get a redirection error. I dont 
understand it, because if I var_dump:

/**
  * @Flow\Inject
  * @var \TYPO3\Flow\Security\Context
  */
  protected $securityContext;

public methodAction() {
     var_dump($this->securityContext->getRoles());
}

I get two roles: Everybody and Anonymous. Please help me.


More information about the FLOW3-general mailing list