CAS authorization

[Stefan Dürr]

Hi,
You do not need the CAS-Server for this, except of disallowing 
applications generally to authenticate via CAS. If you have the User's 
name in your application, then you can deny this user the access to all 
pages of the application (and show him a speacial error-page). that's all :)

regards stefan



dale77 schrieb:
> What do you mean by this Andrew? My intended functionality would be to
> inject another "error" page into the CAS web flow if service X was
> disallowed to user Y. Can this be done at the CAS server using Acegi/Spring
> security?
>
>
> Andrew Ralph Feller, afelle1 wrote:
>   
>> For authorization matters, perhaps you should look into Acegi / Spring
>> Security 2.0
>>
>>     
>
>