component (webscript) level authentication

[tlb]

a request for "user" authentication in the webscript descriptor does not work ie.

<webscript>
  <shortname>Products Page - Main Section</shortname>
  <url>/products/main</url>
  <authentication>user</authentication>
 </webscript>

authentication works in the page descriptor, but the components of the page are not secured.

Should it work this way? or am I doing it wrong?
thanks.

[kroast]

The page is what secures the components. Component level auth is not yet implemented (it would need to resolve all components that will be bound at runtime and calculate the minimum auth required). So if you have at least one "user" auth component then you need to ensure the page is "user" auth.

Thanks,

Kev