From 6815399bc548a17a8b1a88a42651b814c49df3df Mon Sep 17 00:00:00 2001 From: sminnee Date: Sun, 11 Oct 2009 00:47:05 +0000 Subject: [PATCH] ENHANCEMENT: Include $allowed_actions by default on new sites, to encourage people to build more secure sites. git-svn-id: svn://svn.silverstripe.com/silverstripe/open/phpinstaller/trunk@88520 467b73ca-7a2a-4603-9d3b-597d59a354a9 --- mysite/code/Page.php | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/mysite/code/Page.php b/mysite/code/Page.php index 58fb4dd..f6e7330 100755 --- a/mysite/code/Page.php +++ b/mysite/code/Page.php @@ -12,6 +12,25 @@ class Page extends SiteTree { class Page_Controller extends ContentController { + /** + * An array of actions that can be accessed via a request. Each array element should be an action name, and the + * permissions or conditions required to allow the user to access it. + * + * + * array ( + * 'action', // anyone can access this action + * 'action' => true, // same as above + * 'action' => 'ADMIN', // you must have ADMIN permissions to access this action + * 'action' => '->checkAction' // you can only access this action if $this->checkAction() returns true + * ); + * + * + * @var array + */ + public static $allowed_actions = array ( + 'SearchForm' + ); + public function init() { parent::init();