Tuesday, August 29, 2006

How are Pages/Tabs are selected for display by User

The behavior I wanted to understand was: "How are the pages/tabs displayed in the default-page.psml effected by the user who is logged in"?

The simple way to see this is to login and notice that you see a different set of tabs on the default-page then when you're not logged in. The difference is related to being identified as a user or guest. So, I went looking through the rules in the profiler documentation and functionality. However, I didn't see anything.

FINALY, I stumbled on the security that is encoded in each page. If you check the pages in the top level directory you'll notice that some of them express a <security-constraints-ref> for "users" and some of them have "public-view". So the decision about whether to display them is coded in the page. (I'm not sure where the "policy enforcment" is implemented though, I guess in some "page composer"/page manager.

No comments: