[FLOW3-general] How to secure a controller?

[Bastian Waidelich]

Qbus | Axel Wüstemann wrote:

> Isn't the access to the LoginController GRANTed by
>
>     Everybody:
>       methods:
>         Login: GRANT
>
> ?


Make sure that your *initialize*Action()* is also accessible.
You can do this like:

resources:
   methods:
     Secure_Actions: 
'method(Your\Package\Controller\(Foo|Bar)Controller->(?<!initialize).*Action())'

HTH

-- 
Bastian Waidelich
--
Core Developer Team

TYPO3 .... inspiring people to share!
Get involved: typo3.org