[FLOW3-general] Security Framework: access on resource for not logged user

Robin Lehrmann role at vkf-renzel.de
Wed Oct 17 12:04:50 CEST 2012


Can anyone help me please:

Hello together!

I have a login page. If the user has the 'Anonymous' role, he can access on the Login page.
The Employee role cannot access on the login page.

My Policy.yaml:

roles:
#  Anonymous: []
  Employee:    []
  NewsletterAdministrator:    [Employee]
  CustomerAdministrator:    [Employee]
  ArticleAdministrator:    [Employee]
  GalleryAdministrator:    [Employee]
  Administrator:    [Employee]

resources:
  methods:
    Login_Methods: 'method(Pkg\Authenticator\Controller\LoginController->(login|authenticate)Action())'
    Logout_Method: 'method(Pkg\Authenticator\Controller\LoginController->logoutAction())'

acls:
  Anonymous:
    methods:
      Login_Methods: GRANT
  Employee:
    methods:
      Logout_Method: GRANT

Im not logged in on my page and get a redirection error. I dont understand it, because if I var_dump:

/**
* @Flow\Inject
* @var \TYPO3\Flow\Security\Context
*/
protected $securityContext;

public methodAction() {
    var_dump($this->securityContext->getRoles());
}

I get two roles: Everybody and Anonymous. Please help me.

Cheers, Robin.



More information about the FLOW3-general mailing list