[jboss-user] [JBoss Seam] - Seam security question.

2007-12-13 Thread Stateless Bean
Hi, Seam allow to login one user to 2 different accounts. How can I check if user is logged in, and logout him? Is any easy way to do this? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4112529#4112529 Reply to the post : http://www.jboss.com/index.html?modu

[jboss-user] [JBoss Seam] - Seam security question, in vpn environment

2007-05-26 Thread liudan2005
I have some pages under /admin/* that I don't want them publicly available. I have a virtual NIC with IP 10.3.0.1, I need to allow access to /admin/* that comes from this NIC. It would be nice if Seam support this: | | I don't know if there's other better ways doing it. Can someone share

[jboss-user] [JBoss Seam] - Seam Security Question - Tomcat Valve

2007-03-01 Thread bsmithjj
Hello, We have written a custom Tomcat valve-realm implementation that integrates our JBoss servers with a CAS-SSO system. Our valve-realm implementation supplies the Principal to the HttpServletRequest and handles invocations of isUserInRole(String role) on the HttpServletRequest. This elimi

[jboss-user] [JBoss Seam] - Seam Security question

2007-02-27 Thread JohnEChesher
The example seamspace application, on logout, calls action method identity.logout, but does not explicitly call Seam.invalidateSession(). a) Does identity.logout invalidate the session for me? (I thought I saw a hint to the contrary, but I cannot reproduce...) b) if not, shouldn't I create a

[jboss-user] [JBoss Seam] - Seam Security Question

2006-11-16 Thread kasim
was going over some of the Seam security items (using @Secure) and declaring an authenticator. Now this only works on the components right? There is nothing right now that does page level security? I noticed on your issue log you have anonymous wrote : | The security framework for Seam: |