Hi Patrick,
thanks for the hints and the links.
Unless I use redirect in a navigation rule, in a filter I don't get the
destination of the request, but the source.
example: login.jsp => start.jsp
When performing the login, the information I have when filtering the
login-request is the URL of login.jsp.
But useful for me is only the requested resource. In a PhaseListener I could
access the requested view-id:
public void beforePhase(PhaseEvent phaseEvent) {
String viewId =
phaseEvent.getFacesContext().getViewRoot().getViewId();
Then I can easily distinguish if a protected resource is requested or not.
I'll try it, though coupling the authorization to the framework.
Regards,
Jan
--
View this message in context:
http://www.nabble.com/Authorization-via-view-handler-tf2316361.html#a6447570
Sent from the MyFaces - Users mailing list archive at Nabble.com.
