Restrict Page Access

Hello,
I would like to require login at the page level on a LiveSite site. There is a "Requires Login" property under page settings for sites and pages. The runtime does not seem to honor the property for pages. Works fine at the site level.

The com\interwoven\livesite\model\page\Page.class in the livesite.jar contains an isPrivate property.

The com\interwoven\livesite\runtime\model\page\RuntimePage.class available during runtime through RequestContext does not have an isPrivate property.

Is there no way to read the "requires login" page property during runtime? Why does it exist?

Thanks!

Find more posts tagged with

Comments

tec_iwov

what version are you using?

you might need to talk to support on this

rangandr

Interwoven TeamSite 6.7.1 Service Pack 1
Interwoven LiveSite 3.0.2.0.68986

The same problem existed under the LiveSite 3.0.0 version. Makes sense because the livesite-runtime.jar RuntimePage.class object has no attribute related to the requires login property.

Has the "Requires Login" property worked at the page level for anyone else?

Thanks

tec_iwov

definitely sounds like a bug.

Migrateduser

The "Requires login" is a site level property. This means when somebody hits the site, the designated "Login" page will be shown. In preview, this "Requires Login" check is ignored, otherwise a developer will have to _login_ every time to preview a particular page he/she is putting together.

If you are saying such a site after being published to production is not presenting the Login page, it would qualify as a bug.

Ofcourse, having developers set this property at the page level for every page will be tedious, don't you think?

rangandr

The page-level requires login works - sorry guys, just needed to force the runtime cache to invalidate - should have tried that...

I ended up having to build a custom solution for this though as I needed to preserve the user's originally requested page for the login redirect and needed to display a friendly "become a member to view this page" message on the sign in screen.

tec_iwov

you have two levels of configuration to allow flexibility. there are sites that require you to login to do anything like google mail and there are sites that are a mix of open end secured pages such as yahoo. this is what livesite is trying to provide with the site level and the page level configurations