[Neos] Create protected area in Neos Website
Christian Müller
christian.mueller at typo3.org
Thu Feb 20 08:56:15 CET 2014
Hi Brainshack,
the logic exists already. See the field "accessroles" in the
"typo3_typo3cr_domain_model_nodedata" table. You can set them via
Node::setAccessRoles() and it should be an array of
TYPO3\Flow\Security\Policy\Role objects.
Just be aware that this works for backend and frontend, so in order for
your editors to edit those pages you need to grant them access or let
the Editor role inherit from the frontend user role(s) that you need to
define.
This is not yet public API and we don't expose it anywhere in the user
interface. I am not aware of any plans currently to change it, but it
*could* still change in future versions until we declare it public.
Cheers,
Christian
Brainshack wrote:
> Anyone? I cant find anything about it in the docs. A little pointer in the
> right direction would be great :)
>
>
> 2014-02-18 9:17 GMT+01:00 Brainshack<brainshack at gmail.com>:
>
>> Hello everyone,
>>
>> I wonder if there are any best practices or features regarding securing
>> sites in the frontend.
>>
>> I basically want a part of the page tree to be only reachable with a valid
>> frontend login.
>>
>> For the little I know about Neos, I would probably try something like this:
>>
>> 1. Create a new Document Node Type for protected sites.
>>
>> 2. For Login / Registration, I would use flows Account Management with
>> special frontend roles, so the user cant login to the backend.
>>
>> The biggest question in that approach would be, how to handle the ACL for
>> the page ressources. If I add a node type for pages in neos, can i simply
>> use my Package's Policy.yaml to protect those sites from being visited ?
>>
>> Or am I maybe totally wrong and there is a much better approach?
>> _______________________________________________
>> Neos mailing list
>> Neos at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/neos
>>
--
Christian Müller
Flow / Neos Team Community Contact
TYPO3 .... inspiring people to share!
Get involved: http://typo3.org
More information about the Neos
mailing list