How to restrict/redirect certain object views ?

Thursday 04 September 2008 3:29:45 pm

You can always do:

{if [has_access]}
[content]
{else}
You're not allowed bla bla bla.
{/if}

In [has_access] you check if the user has a certain role.
It's not nice, but it works.

Friday 05 December 2008 12:37:44 am

By this you don't have to put a message.

And you don't have to implement access rules in templates witch are ugly and insecure by design.
For instance: If one of your readers knows a few things about eZ Publish he can try to guess for other views you might have beside full and line, he needs to know the node id as well but not something that is to hard in a default ez install. It's even worse if templates decide on edit/delete access..

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom