[
https://issues.apache.org/jira/browse/DELTASPIKE-450?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
John Schneider updated DELTASPIKE-450:
--------------------------------------
Attachment: test.zip
Test project that reproduces the issue in my environment - Glassfish 4, Weld
2.0.4, Mojarra 2.2.5 Snapshot. Here is the output from Glassfish when
deploying the app:
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: visiting unvisited references
INFO: class:
org.apache.deltaspike.core.impl.exception.control.extension.ExceptionControlExtension
activated=true
INFO: class:
org.apache.deltaspike.jsf.impl.scope.mapped.MappedJsf2ScopeExtension
activated=true
INFO: class: org.apache.deltaspike.jsf.impl.config.view.ViewConfigExtension
activated=true
INFO: class: org.apache.deltaspike.core.impl.config.ConfigurationExtension
activated=true
INFO: class: org.apache.deltaspike.jsf.impl.scope.view.ViewScopedExtension
activated=true
INFO: class: org.apache.deltaspike.security.impl.extension.SecurityExtension
activated=true
INFO: class: org.apache.deltaspike.core.impl.message.MessageBundleExtension
activated=true
INFO: class: org.apache.deltaspike.core.impl.exclude.extension.ExcludeExtension
activated=true
INFO: class:
org.apache.deltaspike.core.impl.exclude.CustomProjectStageBeanFilter
activated=true
INFO: class: org.apache.deltaspike.core.impl.exclude.GlobalAlternative
activated=true
INFO: class: org.apache.deltaspike.core.impl.jmx.MBeanExtension activated=true
INFO: Computed the following DeltaSpike ProjectStage: Production
WARNING: The following warnings have been detected: WARNING: Parameter 1 of
type T from public void
org.apache.deltaspike.core.util.context.ContextualInstanceInfo.setContextualInstance(T)
is not resolvable to a concrete type.
WARNING: Parameter 1 of type javax.enterprise.context.spi.CreationalContext<T>
from public void
org.apache.deltaspike.core.util.context.ContextualInstanceInfo.setCreationalContext(javax.enterprise.context.spi.CreationalContext<T>)
is not resolvable to a concrete type.
INFO: class:
org.apache.deltaspike.servlet.impl.event.EventBridgeContextListener
activated=true
INFO: class:
org.apache.deltaspike.servlet.impl.event.EventBridgeSessionListener
activated=true
INFO: Initializing Mojarra 2.2.5 (-SNAPSHOT 20131127-0846
https://svn.java.net/svn/mojarra~svn/branches/MOJARRA_2_2X_ROLLING@12684) for
context '/test'
INFO: class:
org.apache.deltaspike.jsf.impl.listener.request.DeltaSpikeFacesContextFactory
activated=true
WARNING: WELD-001529 An InjectionTarget is created for a class
org.apache.deltaspike.jsf.impl.listener.request.DeltaSpikeFacesContextFactory
which does not have any appropriate constructor.
INFO: class:
org.apache.deltaspike.jsf.impl.listener.request.DeltaSpikeLifecycleFactoryWrapper
activated=true
WARNING: WELD-001529 An InjectionTarget is created for a class
org.apache.deltaspike.jsf.impl.listener.request.DeltaSpikeLifecycleFactoryWrapper
which does not have any appropriate constructor.
INFO: class:
org.apache.deltaspike.jsf.impl.listener.phase.JsfRequestLifecyclePhaseListener
activated=true
INFO: class:
org.apache.deltaspike.jsf.impl.listener.phase.DeltaSpikePhaseListener
activated=true
INFO: class:
org.apache.deltaspike.jsf.impl.navigation.DeltaSpikeNavigationHandler
activated=true
INFO: class:
org.apache.deltaspike.jsf.impl.listener.action.DeltaSpikeActionListener
activated=true
INFO: class: org.apache.deltaspike.jsf.impl.view.DeltaSpikeViewHandler
activated=true
INFO: class: org.apache.deltaspike.jsf.impl.security.SecurityAwareViewHandler
activated=true
INFO: class: org.apache.deltaspike.servlet.impl.event.EventBridgeFilter
activated=true
INFO: Loading application [test] at [/test]
INFO: test was successfully deployed in 1,654 milliseconds.
> Secured ViewConfig's are not working as documented
> --------------------------------------------------
>
> Key: DELTASPIKE-450
> URL: https://issues.apache.org/jira/browse/DELTASPIKE-450
> Project: DeltaSpike
> Issue Type: Bug
> Components: Core, Security-Module
> Affects Versions: 0.5
> Environment: Glassfish 4 / Weld 2.0.4
> Reporter: John Schneider
> Assignee: Gerhard Petracek
> Attachments: test.zip
>
>
> I believe this is the documented method for securing pages, but the following
> view configuration does not invoke an AccessDecisionVoter.
> @View(navigation = NavigationMode.REDIRECT)
> public interface Pages extends ViewConfig {
> class LogIn implements Pages {}
> @Secured(value = ApplicationAccessDecisionVoter.class, errorView =
> LogIn.class)
> class Manage implements Pages {}
> }
> I also tried with a @Sterotype @Secured annotation which I've confirmed to be
> working perfectly when placed on a CDI business method.
> @Retention(RetentionPolicy.RUNTIME)
> @Target({ElementType.TYPE, ElementType.METHOD, ElementType.FIELD})
> @Documented
> @Stereotype
> @Secured(value = ApplicationAccessDecisionVoter.class, errorView =
> LogIn.class)
> public @interface LoggedIn {
> }
> @View(navigation = NavigationMode.REDIRECT)
> public interface Pages extends ViewConfig {
> class LogIn implements Pages {}
> @LoggedIn
> class Manage implements Pages {}
> }
--
This message was sent by Atlassian JIRA
(v6.1#6144)
