action

Each action element describes one rule for security checking. It has one required attribute pattern, and, two optional attributes user and author.

Syntax

<action
    pattern="text"
    user="(true|false)"?
    author="(true|false)"?
  >
    <permission>...</permission>?
  </action>

Attributes

pattern="text"

The pattern attribute is common to both action and ajax elements. The value of this attribute is an Ant like pattern string. Examples include delete*, *Blog, delete*Image.

user="(true|false)" (optional)

The user attribute is common to both action and ajax elements. This is a boolean attribute, and, the default value is false. If it is set to true, it will check if the given user is a logged in user.

author="(true|false)" (optional)

The author attribute is common to both action and ajax elements. This is a boolean attribute, and, the default value is false. If it is set to true, it will check if the logged in user is the author of the given content item.