[Flow] ACL Problems with initialize Action

Christian Loock chl at vkf-renzel.de
Wed Apr 2 11:49:00 CEST 2014


So what is the standard for `method`. Does it catch all, protected and 
public? Has to be the case, since my initializeActions allready were 
protected. Changed the Policy file now, so that all my resources look 
for public methods. Seems to work now.

Thanks


On 02.04.2014 11:32, Adrian Föder wrote:
> Yep your observation was correct, just answer:
>
> make it...
>
> 'method(public Vendor\Package\Controller\StandardController->.*Action())'
>
> (note the `public`), and make all your initialize*Actions `protected`.
>
> So your ACL will only affect public methods, and since your 
> initialize... actions are, any can be, protected, they are not 
> affected by ACL AND not exposed since they are... protected.
>
> -adrian
>
> Am 02.04.2014 11:20, schrieb Christian:
>> Hi,
>>
>> there seems to be a problem with my ACL since I updated to Flow 2.1. It
>> seems like, the initializeAction of my Controller are being "protected"
>> now aswell. The funny thing about it is, that I actually define a
>> resource, that should cover all .*Action mehods.
>>
>> Here the error:
>>
>> Access denied (0 denied, 0 granted, 1 abstained) to method
>> Vendor\Package\Controller\StandardController::initializeAction().
>>
>> And here the ACL:
>>
>> resources:
>>     methods:
>>      Vendor.Package.StandardController:
>> 'method(Vendor\Package\Controller\StandardController->.*Action())'
>>
>> acls:
>>    myRole:
>>      Vendor.Package.StandardController: GRANT
>>
>>
>> Now, this works on normal actions of the controller, but not on
>> initializeAction.
>>
>> How is that even possible?
>>
>
> _______________________________________________
> Flow mailing list
> Flow at lists.typo3.org
> http://lists.typo3.org/cgi-bin/mailman/listinfo/flow

-- 
Cheers,

Christian



More information about the Flow mailing list