Is there a way of preventing a user manipulating the URL and accessing a page that should only be accessed by the result of an action on a session bean?
For example, I have two pages of data entry followed by a pdf generated by the iText component. If I am on page 1 or 2 then it is still possible for me to access page 3 (and get useless results) by manipulating the URL.
This seems like a serious flaw in Seam to me. It's possible that I am missing something obvious as I am fairly new to Seam and JSF.
Thanks.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4029688#4029688
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4029688
So you want non-logged in user to be able to change the locale as well ?
For logged-in user you should change the preference (you don't have to do it using the portlet, nothing prevent you from creating your own action calling the identity service to update the preferred language)
For non-logged-in user, you would have to define how you want to store the preferred locale (session probably) and adapt org.jboss.portal.core.aspects.server/LocaleInterceptor accordingly
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4029683#4029683
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4029683
Hi !!
I have a question.
I've seen that we can add
<custom-portlet-mode>
| <portlet-mode>config</portlet-mode>
| </custom-portlet-mode>
in the portlet.xml. But this custom mode isn't supported by all portals. I just want to know if JBoss support this mode ?
If it don't support it, I want to know when it will do that (what version) ?
And, what is all custom portlet modes that JBoss support ?
Thank you. and sorry for ma english, I'm french...
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4029680#4029680
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4029680