[ 
https://issues.apache.org/jira/browse/DELTASPIKE-664?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14059953#comment-14059953
 ] 

Gerhard Petracek commented on DELTASPIKE-664:
---------------------------------------------

i can reproduce it now.
it's triggered by ViewHandler#getRedirectURL() which causes a call of 
ViewHandler#createView (indirectly)

> SecurityViolation are evaluated twice for redirect pages with configured 
> errorView
> ----------------------------------------------------------------------------------
>
>                 Key: DELTASPIKE-664
>                 URL: https://issues.apache.org/jira/browse/DELTASPIKE-664
>             Project: DeltaSpike
>          Issue Type: Bug
>          Components: Security-Module
>    Affects Versions: 1.0.0
>            Reporter: Philip Herbst
>            Assignee: Gerhard Petracek
>
> I modified deltaspike-jsf-example to reproduce the behaviour
> Modification to org.apache.deltaspike.example.viewconfig.Pages
> {code}
>     @Secured(value = DenyAllAccessDecisionVoter.class, 
>              errorView = ViewConfigFolder.Error.class)
>     public interface SecuredPages extends ViewConfig, RedirectedPages {}
> ...
>     public class Error implements ViewConfig {}
> {code}
> errror.xhtml
> {code}
>     <h:form>
>         <h:messages />
>     </h:form>
> {code}
> Result: Error message is shown twice on error page.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to