Hi I have not looked into the code yet, but I suspect that that MyFaces is doing things to the request that it should not do (in my opinion). To me it looks like it completely clears the request, and the rebuilds it with its own parameters. The SecurityFilter that I am using, puts attributes into the request, but they are lost on the next pass. What remains are the managed beans. Is this behavioiur intended or what ?
Hermod * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * This email with attachments is solely for the use of the individual or entity to whom it is addressed. Please also be aware that the DnB NOR Group cannot accept any payment orders or other legally binding correspondence with customers as a part of an email. This email message has been virus checked by the virus programs used in the DnB NOR Group. * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

