DISQUS

Robert Brendler <robert.brendler@gmail.com> wrote, in response to Robert Brendler:

Ok, finally I found something that gives me what I want with on-board tools:

http://www.warski.org/blog/2010/04/extending-the-security-interceptor-for-weldjsf2/

or use the ready implemented framework alternative:

http://docs.jboss.org/seam/3/security/latest/reference/en-US/html/security-introduction.html#d0e100

Link to comment

IP address: 87.139.232.83

Robert Brendler wrote:

I could only achieve my intended result by adding an additional if ( ctx.isCallerInRole("user") && !ctx.isCallerInRole("guest") ) { // needs to explicitly exclude all other roles return principal.toString(); } else { // throw new EJBAccessException("Username '"+principal.toString()+"' does NOT have role 'user'"); return null; // for the lazy ones } this is far from desireable ...

-----
Options: You can moderate through email. Respond in the body with "Delete", "Approve", or "Spam". Reply with "Like" to like this comment, or respond in the body to post a reply comment. Or use the moderate panel: http://jdf.disqus.com/admin/moderate/#/pending

To turn off notifications