[Flow] Authentication Issue

[Alexander Berl]

Hi Pascal,

yes, correct, firewall and ACL connect authentication with authorization.
You configured authentication, but now want authorization to kick in -
hence you need to either configure firewall or ACL for that to happen.

It just wouldn't make sense to block people out of the whole site by
default as soon as they configure authentication, because authentication
does not implicit a required authorization.

Regards,
Alexander

Am 12.06.2013 11:37, schrieb The Social Nerd:
> Hi Jan,
> 
> I think, the firewall and acl part is for connecting authentication with
> authorization. So the authentication process has to work without using
> this, or? And why do I have to specify the controller I want to protect?
> Why there is no whitelist approach, so everything is blocked until I
> grant access?
> 
> Best,
> Pascal