[TYPO3-english] FE authentication in TYPO3 4.x

[Tonix (Antonio Nati)]

  Il 03/10/2010 21:33, Steffen Gebert ha scritto:
>> So this means if I use different authentications (services) in different
>> trees of the same website, check is always done against all services?
>> Speaking of standard installation, no tricks on code.
> Services are checked until one makes a final decision (code 0 or 200).
> Whether it returns 100 or 200, if it can't validate the user, depends 
> on the implementation.
>
>> And if I want to authenticate a tree against one specific service only,
>> I have to modify typo3 code?
> No, you can do this in localconf.php I think: The services register 
> theirselfes in their own ext_localconf.php (or ext_tables.php?) as 
> auth service. Unset this registration and set them only for the 
> required services dependent on $_SERVER variables.
>
> Kind regards
> Steffen
>

Speaking about TYPO3 authentication, it is the third time, in a few 
days, I discover the option "more easy" is preferred to "more secure", 
and, indeed, it always leads to "less secure".

I'd love to know more about "security priorities" in typo3, and 
architectural priorities.

Regards,

Tonino


-- 
------------------------------------------------------------
         Inter at zioni            Interazioni di Antonio Nati
    http://www.interazioni.it      tonix at interazioni.it
------------------------------------------------------------