Add security checks to Velocity service.

[GoogleCodeExporter]

Is there a way to retrieve all the child pages for a given parent
page, but excluding any pages the current user doesn't have rights to
view?

I.e. if a page has security set for the guest group to read, then it
would be returned regardless of who is logged in (or not), but if a
page is set to be denied to guest, but read to a specific user group,
then the page shouldn't be returned.

As it is, all the "findPage..." methods I can find seem to return all
pages, regardless of security rights. To my mind, the pages for which
a user doesn't have rights to access shouldn't be visible to them.

ie. I'm expecting (but not finding) something like

$service.findPageChildrenByPermissions($page.friendlyURL)

Any help on where to find what I'm looking for in the code (if it
exists), or if not, a best practice implementation?

Thanks.

Original issue reported on code.google.com by kinyelo@gmail.com on 2 Sep 2011 at 7:41

[GoogleCodeExporter]

This issue was closed by revision r1092.

Original comment by kinyelo@gmail.com on 2 Sep 2011 at 7:43

• Changed state: Fixed