src/site/apt/tutorial/advanced/security.apt

~~ $Id$
~~
~~ Licensed to the Apache Software Foundation (ASF) under one
~~ or more contributor license agreements.  See the NOTICE file
~~ distributed with this work for additional information
~~ regarding copyright ownership.  The ASF licenses this file
~~ to you under the Apache License, Version 2.0 (the
~~ "License"); you may not use this file except in compliance
~~ with the License.  You may obtain a copy of the License at
~~
~~ http://www.apache.org/licenses/LICENSE-2.0
~~
~~ Unless required by applicable law or agreed to in writing,
~~ software distributed under the License is distributed on an
~~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
~~ KIND, either express or implied.  See the License for the
~~ specific language governing permissions and limitations
~~ under the License.
~~
         -----------
         Security
         -----------

Security

  Tiles allows the visibility of a template, an attribute or a definition only
  to selected roles.

* Allowing definitions

  A definition can be allowed to be rendered only by selected roles:

  * in XML definition files:

---------------------------------
<definition name="test.definition"
    template="/layout/my-template.jsp role="myrole">
    ...
</definition>
---------------------------------

  * in JSP pages, when inserting definitions:

---------------------------------
<tiles:insertDefinition name="test.definition" role="myrole" />
---------------------------------

  * in JSP pages, when definining definitions:

---------------------------------
<tiles:definition name="test.definition"
    template="/layout/my-template.jsp" role="myrole">
    ...
</tiles:definition>
---------------------------------

* Allowing attributes

  An attribute can be allowed to be rendered only by selected roles:

  * in XML definition files:

---------------------------------
<definition name="test.definition"
    template="/layout/my-template.jsp>
  <put-attribute name="header" value="/header.jsp" role="myrole" />
</definition>
---------------------------------

  * in JSP pages, when inserting attributes:

---------------------------------
<tiles:insertAttribute name="header" role="myrole" />
---------------------------------

  * in JSP pages, when putting attributes:

---------------------------------
<tiles:putAttribute name="header" value="/header.jsp" role="myrole" />
---------------------------------

* Allowing templates

  Templates can be allowed to be rendered only by selected rows in JSP pages:

---------------------------------
<tiles:insertTemplate name="test.definition"
    template="/layout/my-template.jsp" "role="myrole">
    ...
</tiles:insertTemplate>
---------------------------------