From 2a0aae19049feba4eb70bed10f9db3223f32580e Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Thu, 25 Mar 2010 19:48:26 +0000 Subject: [PATCH] SEC-524: Document addition of "var" attribute in authorization tags. --- docs/manual/src/docbook/taglibs.xml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/manual/src/docbook/taglibs.xml b/docs/manual/src/docbook/taglibs.xml index 878720880d..c21a7bc44b 100644 --- a/docs/manual/src/docbook/taglibs.xml +++ b/docs/manual/src/docbook/taglibs.xml @@ -50,6 +50,10 @@ This content will only be visible to users who are authorized to send requests t duplicate the information (such as the required roles) within your JSPs. This approach can also be combined with a method attribute, supplying the HTTP method, for a more specific match. + The boolean result of evaluating the tag (whether it grants or denies access) can be + stored in a page context scope variable by setting the var attribute + to the variable name, avoiding the need for duplicating and re-evaluating the condition + at other points in the page.
The <literal>authentication</literal>Tag @@ -89,5 +93,7 @@ represented by the values "1" or "2" on the given object. load the Acl instance for the supplied object. The Acl will be invoked with the required permissions to check if any of them are granted. + This tag also supports the var attribute, in the same way as the + authorize tag.