access denied only for some formats when accessing via api-key

[michael]

Hi,
a action to which access is controlled via acl9 responds to several
formats.

If accessing using a api-key (authlogic defaults) acl9 denies access
to some formats and to others not.
e.g. accessing .html or .json works but not for .xml or others (non
standardised).

If accessing via cookia authentication (or normal browsing) access is
(as defined) allowed in all necessary cases (but indifferent to the
format)...

has anybody exerienced similar problems?


as a followup questions: Is there a way to have different access rules
for different formats (whilst same action)?

thanks,
Michael

[Sharad Jain]

> as a followup questions: Is there a way to have different access rules
> for different formats (whilst same action)?
>

one way would be:

access_control do
actions :show do
allow Role::BATCH_JOB, :if => format_xml?
end
end

private
def format_xml?
params[:format] == "xml"
end

> thanks,
> Michael
>