Hi Laurent, I've looked at the source code of SecurityInterceptor. As long as binding does not generate an error, CustomValidation step is executed prior to checking access. After validation, access is checked only if CustomValidation step generates an error.
On EventHandling step, access is checked prior to executing event. I don't know if this can be considered as a "bug" or a "feature", so it would be better to ask Oscar Westra van Holthe - Kind or Fred Daoud. Christian -----Original Message----- From: M.C.S. [mailto:m...@syn-online.de] Sent: Wednesday, June 02, 2010 2:47 PM To: Stripes Users List Subject: Re: [Stripes-users] SecurityManager.Class not called on @ValidationMethod(on = ...) method, is it a bug ? Hi Laurent, I had the same issue, so I built my own release of StripesStuff with a changed Interceptor. I asked a long time ago one of the authors, but never got an answer why the SecurityInterceptor intercepts that "late". Regards Marcus Am 02.06.2010 17:47, schrieb Laurent Perez: > Hello > > My application has its own SecurityManager, extending J2EESecurityManager. > > I have an ActionBean annotated with @RolesAllowed("AUTHENTICATED"), > this action bean implements ValidationErrorHandler, and has a > validation method annotated with @ValidationMethod(on = EVENT_PREPARE) > > Whenever I reach the @ValidationMethod code part with a debugger, I > can see that the SecurityManager does not get fired, it looks like > @ValidationMethod is invoked "before" Stripes' SecurityManager. > > Can anyone confirm this ? > > thanks > laurent > > > ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Stripes-users mailing list Stripes-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/stripes-users ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Stripes-users mailing list Stripes-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/stripes-users
