Sunday, May 27, 2012

Re: Unauthorized users don't get redirected to login action

> Trying to access an unauthorized area of the app should not log them out by
> default and kick them to a log in page.

There's absolutely no need to log them out first. Redirecting to index
page is weird, the user never asked for it. But they did ask for the
resource they had no right to access, so presenting them with a login
screen gets them closer to what they really wanted. Does it make any
sense now?

--
Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org
Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions.


To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php

No comments: