[Flow] Handle "no access" / 403 forbidden

Cornel Widmer cornel at webstobe.ch
Thu May 22 11:19:51 CEST 2014


Hello Aske

Thanks for your input. I already have defined an entry point. But this mechanism doesn't catch all possible errors.

What if a user is authenticated but not with the rights to access a given Resource/Controller? Then you need an other error-handling.
So the complete solution in my application is a combined mechanism of both mechanism.

Authentication entry points if a user is accessing a password protected area -> send it back to login
Access denied handling if a user is authenticated but has no enough rights -> display an error page

Best regards
Cornel


More information about the Flow mailing list