cocoon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ugo Cei <u....@cbim.it>
Subject Re: [Proposal] Implementing XMLForm with Flow
Date Tue, 24 Dec 2002 11:33:32 GMT
Christopher Oliver wrote:
> Yes, you can use Function.apply() to pass a variable argument list to 
> another function,  like this:
<snip/>

Great! It works perfectly. Now I can use the Flow to protect all the 
map:call's without checking the user's credentials in every single 
function, BUT ...

... I still have XSP pages (views) that are invoked by the Flow via 
sendPage, and those of course have pipelines in the sitemap, so one 
could invoke them by directly invoking their URL, bypassing the Flow.

This is BAD (TM) as it forces me to put further checks in my views. I've 
tried making the pipelines "internal-only", but doing so makes them 
invisible also to the Flow, even though sendPage uses the cocoon: protocol.

It would be better, IMHO, if sendPage (and sendPageAndWait) could invoke 
internal-only pipelines. Is there any particular reason why it isn't so?

	Ugo

-- 
Ugo Cei - http://www.beblogging.com/blog/


---------------------------------------------------------------------
To unsubscribe, e-mail: cocoon-dev-unsubscribe@xml.apache.org
For additional commands, email: cocoon-dev-help@xml.apache.org


Mime
View raw message