Re: Unauthorized users don't get redirected to login action

On Saturday, May 26, 2012 3:29:33 PM UTC-4, rihad wrote:

On May 25, 7:13 pm, Dave Milsom <mil...@gmail.com> wrote:
> On Friday, May 25, 2012 2:15:51 AM UTC-4, rahajiyev wrote:
>
> > On May 24, 6:52 pm, Ceeram <c33...@gmail.com> wrote:
> > > Why should a logged in user be redirected to login?
>
> > The logged in user doesn't have that specific privilege.
> > One would expect a login screen to appear when one has insufficient
> > privileges...
>
> I wouldn't expect that.

Well, you would expect to be told that you don't have the permission,
and be allowed to log in as the user who does have it, wouldn't you?

No, I would expect that the logged in user has the permissions they need. Trying to access an unauthorized area of the app should not log them out by default and kick them to a log in page. If that is what you chose to do, then go ahead. It is not a "design deficiency" by any stretch.

--
Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org
Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions.
 
 
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php