security.allow¶

Security: Allow¶

Allows access to the child content based on given arguments. The ViewHelper is a condition based ViewHelper which means it supports the f:then and f:else child nodes - you can use this behaviour to invert the access (i.e. use f:else in a check if a frontend user is logged in, if you want to hide content from authenticated users):

<v:security.allow anyFrontendUser="TRUE">
    <f:then><!-- protected information displayed --></f:then>
    <f:else><!-- link to login form displayed --></f:else>
</v:security.allow>

Is the mirror opposite of v:security.deny.

Arguments¶

then¶

DataType: mixed
Required: false
Description: Value to be returned if the condition if met.

else¶

DataType: mixed
Required: false
Description: Value to be returned if the condition if not met.

anyFrontendUser¶

DataType: boolean
Required: false
Description: If TRUE, allows any FrontendUser unless other arguments disallows each specific FrontendUser

anyFrontendUserGroup¶

DataType: boolean
Required: false
Description: If TRUE, allows any FrontendUserGroup unless other arguments disallows each specific FrontendUser

frontendUser¶

DataType: mixed
Required: false
Description: The FrontendUser to allow/deny

frontendUsers¶

DataType: mixed
Required: false
Description: The FrontendUsers ObjectStorage to allow/deny

frontendUserGroup¶

DataType: mixed
Required: false
Description: The FrontendUserGroup to allow/deny

frontendUserGroups¶

DataType: mixed
Required: false
Description: The FrontendUserGroups ObjectStorage to allow/deny

anyBackendUser¶

DataType: boolean
Required: false
Description: If TRUE, allows any backend user unless other arguments disallows each specific backend user

backendUser¶

DataType: integer
Required: false
Description: The uid of a backend user to allow/deny

backendUsers¶

DataType: mixed
Required: false
Description: The backend users list to allow/deny. If string, CSV of uids assumed, if array, array of uids assumed

backendUserGroup¶

DataType: integer
Required: false
Description: The uid of the backend user group to allow/deny

backendUserGroups¶

DataType: mixed
Required: false
Description: The backend user groups list to allow/deny. If string, CSV of uids is assumed, if array, array of uids is assumed

admin¶

DataType: boolean
Required: false
Description: If TRUE, a backend user which is also an admin is required

evaluationType¶

DataType: string
Default: 'AND'
Required: false
Description: Specify AND or OR (case sensitive) to determine how arguments must be processed. Default is AND, requiring all arguments to be satisfied if used