The custom action is open without any authentification

[Yann]

Hello Steve,
Anyone can access my custom action through the login page without any authentification. Have you a suggestion about where this problem comes from ?
Cheers
Jean

[shannah]

Custom actions have not permissions associated with them by default. You need to add permission entry in the actions.ini file for that action if you want to limit it.

e.g.

Code: Select all

[my_custom_action]
    permission=view


This would make it so that the user needs the view permission to access this action.

It is sometimes useful to create custom permissions corresponding to your custom action.

e.g.
in the permissions.ini file create a permission called 'my_custom_permission' then add this permission to certain roles.

Code: Select all

my_custom_permission = "Permission for my custom action"

;; A custom role
[MY CUSTOM ROLE extends READ ONLY]
    my_custom_permission=1


[Yann]

Thank you Steve!