Mailing-List: contact users-help@deltaspike.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@deltaspike.apache.org
Received-SPF: pass (nike.apache.org: domain of gerhard.petracek@gmail.com
 designates 209.85.216.49 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAAuOd=VprKntLJ7VqMCc3ux+iuQ24eqiE48dzgVv5m0WHYAgVw@mail.gmail.com>
References: 
 <CAPCnv11HuAtwWVweoXiObXU4cixgPv_Ew7=x0s5NhDwVRWBNsQ@mail.gmail.com>
 <CAAuOd=VprKntLJ7VqMCc3ux+iuQ24eqiE48dzgVv5m0WHYAgVw@mail.gmail.com>
From: Gerhard Petracek <gerhard.petracek@gmail.com>
Date: Sat, 15 Feb 2014 15:22:06 +0100
Message-ID: 
 <CAGJtJfGmXkBrLEmf-FwurLfVDnXAYS+=BxaWR6X7axAm5it6jQ@mail.gmail.com>
Subject: Re: Question about @Secured integration with type safe navigation
To: users@deltaspike.apache.org
Content-Type: multipart/alternative; boundary=001a11c11feee045a604f272a6e9

--001a11c11feee045a604f272a6e9
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

once jsf handles the request, it should work.
(for sure you need your custom AccessDecisionVoter + the corresponding
view-config. please have a look at [1].)

regards,
gerhard

[1] http://deltaspike.apache.org/jsf.html#security-integration-via-secured

http://www.irian.at

Your JSF/JavaEE powerhouse -
JavaEE Consulting, Development and
Courses in English and German

Professional Support for Apache MyFaces


2014-02-15 15:15 GMT+01:00 Thomas Andraschko <andraschko.thomas@gmail.com>:

> AFAIR it worked fine in CODI.
>
> @Gerhard: Any reason why it don't work in DS?
>
>
> 2014-02-15 15:11 GMT+01:00 Karl Kild=E9n <karl.kilden@gmail.com>:
>
> > Hello,
> >
> > If a user simply types in /secured/admin.xhtml in the browser the
> @Secured
> > annotation will not help, right? As far as I understand it's it only
> > triggers the AccessDecisionVoter when you actually navigate with JSF...
> > So I would still need to define a @WebFilter to secure my application.
> >
> > Now, the effect would that a secured request will be secured twice, onc=
e
> by
> > the filter and once by my AccessDecisionVoter and I didn't really
> > accomplish much by using the AccessDecisionVoter? I feel like I am
> missing
> > something.
> >
> > cheers
> >
>

--001a11c11feee045a604f272a6e9--