Quote from: Bo at Nov 10, 2009, 12:28 PM
I’m having a hard time figuring out how to restrict a page to logged-in users only with the new security model.
I’ll get a tutorial out on this shortly, but the gist of it is:
1. Create a Resource Group (for example, RG1)
2. Create a User Group (UG1)
3. Add users you want to have access to user group. make sure they have a Role in the group with an authority level number lower (ie, more powerful) than you’ll specify in Minimum Role later in the user group.
4. Add Context Access to user group - say: context: ’web’, minimum role: ’Member’ (9999 authority), Access Policy ’Resource’
5. Add a Resource Access ACL to user group: Resource Group RG1, Context: ’web’, minimum role: ’Member’ (9999 authority), Access Policy ’Resource’
And that’ll work.