Coldbox Security Interceptor
- by faheem
Hi I am new to coldbox and working on a guestbook messaging forum. does anyone know how I can apply some rule in coldbox to show edit and delete for specified users of admin or user in the edit page. I am not sure how to specify this as I already have my rules here as shown in
securityRules.xml:
SecurityRules.XML
<?xml version="1.0" encoding="UTF-8"?>
<!--
Declare as many rule elements as you want, order is important
Remember that the securelist can contain a list of regular
expression if you want
ex: All events in the user handler
user\..*
ex: All events
.*
ex: All events that start with admin
^admin
If you are not using regular expression, just write the text
that can be found in an event.
<whitelist>ehSecurity\.dspLogin,ehSecurity\.doLogin,ehSecurity\.dspLogoff</whitelist>
-->
<rules>
<rule>
<whitelist>^entries,ehSecurity\..*,registry\..*</whitelist>
<securelist></securelist>
<roles>admin</roles>
<permissions>read,write</permissions>
<redirect>ehSecurity.dspLogin</redirect>
</rule>
<rule>
<whitelist>^entries,ehSecurity\..*,main\..*,^registry</whitelist>
<securelist></securelist>
<roles>author,admin</roles>
<permissions>read</permissions>
<redirect>ehSecurity.dspLogin</redirect>
</rule>
</rules>
