I was going to reply a little later an answer my first question but I think
I've come to a conclusion...
The problem wasn't with JSF, I believe the problem is when an authenticated
user navigates back to the login page. The AccessDesicionManager decides
wether to allow this authenticated principal, however the login page only
has one permission defined which is the permission assigned to the Anonymous
user. now once our user becomes authenticated he drops this permission in
favour of the ones we've defined.
I haven't got back to this problem yet but it looks like I'll have to tack
on the anonymous permission to all authenticated users. If this is the case
would it not make sense for Acegi to assume this user has this anonymous
role and the permission assigned to it even after he moves from anonymous to
authenticated?
regards
trent
From: Ben Alex <[EMAIL PROTECTED]>
Reply-To: [email protected]
To: [email protected]
Subject: Re: [Acegisecurity-developer] Acegi w/ JSF
Date: Mon, 12 Dec 2005 18:14:58 -0500
Trent wrote:
Im seeing some odd behaviour using Acegi with JSF. Does anyone know what
causes Acegi to render the page in the AuthenticationFailureUrl property
from the class AuthenticationProcessingFilter when an authenticated user
navigates back to the login page? Also this page doesnt fully complete
the response either.
Any insight would be appreciated
trent
Is this a problem with Acegi Security only with JSF (ie can you see a
problem when using it natively with JSPs)? Also, which version of Acegi
Security are you using?
Thanks
Ben
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
