[jbossseam-issues] [JBoss JIRA] Closed: (JBSEAM-739) JSF postback authorization
[ http://jira.jboss.com/jira/browse/JBSEAM-739?page=all ]
Gavin King closed JBSEAM-739.
-----------------------------
Resolution: Done
Assignee: Gavin King (was: Shane Bryzak)
Done in CVS. The permission is named "restore", instead of "render".
JSF postback authorization
--------------------------
Key: JBSEAM-739
URL: http://jira.jboss.com/jira/browse/JBSEAM-739
Project: JBoss Seam
Issue Type: Feature Request
Components: Security
Reporter: Gavin King
Assigned To: Gavin King
Fix For: 1.3.0.BETA1
There should be a permission check that occurs when we submit a form from a JSF view id.
There might also be value in securing particular actions or outcomes for a view id, but
that is more speculative.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira