[TYPO3-v4] HTTP Status and protected pages

[Søren Malling]

I agree with you on the HTTP status code, it should throw 401.

I think a handler/field like pageNotFound_handling should be made
(pageUnauthorized_handling?), to handle such request.

A feature: It might even implement the return_url parameter, so the
user can be redirected to the page he/she came from?

Søren Malling

TYPO3 Brugergruppe Danmark: www.typo3danmark.dk
Twitter: twitter.com/sorenmalling



On Sun, Mar 13, 2011 at 10:54 PM, Steffen Kamper <info at sk-typo3.de> wrote:
> Hi,
>
> if i call a user protected page direct (enter url) then it gives a HTTP
> status 404.
>
> This is wrong imho, and it gives no chance to react correct.
> I would think that 401 "Unauthorized" should be used. that would allow,
> * if user is logged in -> redirect to a page informing that he does not have
> enough rights for this page
> * if not logged in -> redirect to login page
>
> At the moment the pageNotFound_handling is called which doesn't help the
> user.
>
> What do you think?
>
> vg Steffen
> _______________________________________________
> TYPO3-project-v4 mailing list
> TYPO3-project-v4 at lists.typo3.org
> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-project-v4
>