false sense of security?
false sense of security?
- Subject: false sense of security?
- From: William Norris <email@hidden>
- Date: Wed, 1 Sep 2004 10:09:26 -0500
certain sections of my application (such as administrative pages) need
to be accessible by only a certain group of people. In PHP, each
page needs to check if the user is authorized. the "security through
obscurity" doesn't really work, since if the user knew the exact URL
they could go straight to the page. Now in WO, it seems as if there
is no link going to a component, then there is really no way to get to
it (aside from direct actions). So my question is this - is it
adequate security to simply not show the link for users who are not
authorized to access those sections? is there any way they could
bypass this? Do I need to recheck the user's credentials on each and
every component / page?
Thanks,
will
_______________________________________________
webobjects-dev mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/webobjects-dev
Do not post admin requests to the list. They will be ignored.