[jbossseam-issues] [JBoss JIRA] Created: (JBSEAM-885) Restricting pages in pages.xml with wildcards
Restricting pages in pages.xml with wildcards
---------------------------------------------
Key: JBSEAM-885
URL: http://jira.jboss.com/jira/browse/JBSEAM-885
Project: JBoss Seam
Issue Type: Feature Request
Components: Security
Affects Versions: 1.1.6.GA
Environment: JBoss AS 5.0.0.Beta1
Reporter: Joshua Jackson
Priority: Optional
If I have directory structure for pages as such:
/department/home.xhtml
/distributor/home.xhtml
I'll be able to secure it in pages.xml with wildcards as such:
<page view-id="/**/*">
<restrict />
</page>
If I have directory structure as such:
/order/purchase/home.xhtml
/order/sales/home.xhtml
I'll be able to secure it in pages.xml with wildcards as such:
<page view-id="/order/purchase/*">
<restrict />
</page>
Since with this pattern it only works if we define the role in <restrict> element as
such:
<page view-id="/order/purchase/*">
<restrict>#{s:hasRole('admin')}</restrict>
</page>
Also this pattern:
<page view-id="/order/**/*">
<restrict />
</page>
And this pattern:
<page view-id="/**/**/*">
<restrict />
</page>
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira