AccessControlConfiguration - Multiple Conditions?

[Cantor, Scott]

> How do I configure for authenticated access to admin functions (beyond
> uncommenting AccessByUser or AccessByAttribute)?

Authentication can be added in general-admin.xml, the flow descriptor beans have an "authenticated" property to control that. One or two of them already are marked that way.

> Is it possible to restrict access by either conditions matched:
> AccessByIPAddress or AccessByUser or AccessByAttribute?

They're (wrappers around) Predicates, you can do anything you want. Those are examples, nothing more.

-- Scott