I adopted the solution from Dmitry, direct access to *.jsp results in a not
found.
Up to now I had a index.jsp that redirects to my jsf-loginpage. For that I
created a welcome-file-list that contains my jsf-login page.
<welcome-file-list>
<welcome-file>login.jsf</welcome-file>
</welcome-file-list>
Thanks for your help
Jan
--
View this message in context:
http://www.nabble.com/How-to-prevent-direct-access-to-JSPs-tf2711803.html#a7562003
Sent from the MyFaces - Users mailing list archive at Nabble.com.
