[CAUSEWAY-895] HomePage should honour authorization rules.

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: viewer-wicket-1.6.0, core-1.6.0
• Fix Version/s: viewer-wicket-1.7.0, core-1.7.0
• Component/s: Core, Viewer Wicket
• Assignee: Unassigned
• Reporter: Daniel Keir Haywood
• Created: 15/Sep/14 19:38
• Updated: 21/Oct/14 05:55
• Resolved: 25/Sep/14 09:39

Description

So, if a user doesn't have permission (the home page action isn't visible and/or usable) then it shouldn't be invoked, and instead simply show the welcome messages.

However, this ticket does NOT require that the system checks that the user has permissions for the resultant object invoked from the home page action (a dashboard or whatever); rather the expectation is that the this the permissions be set-up correctly along with the user's permission to the home page action.

If the user doesn't have permission to the resultant object, then the usual behaviour should occur, ie to show the error page.