[jbossseam-issues] [JBoss JIRA] Commented: (JBSEAM-2719) NotLoggedInException and AuthorizationException handlers defined in pages.xml are ignored on IBM JVM

NotLoggedInException and AuthorizationException handlers defined in pages.xml are ignored on IBM JVM ---------------------------------------------------------------------------------------------------- Key: JBSEAM-2719 URL: http://jira.jboss.com/jira/browse/JBSEAM-2719 Project: Seam Issue Type: Bug Components: Core Affects Versions: 2.0.1.GA Environment: SUSE 10 on s390x, IBM JVM 2.6 (Sun JRE 1.6 update 4 equivalent) Reporter: Jonathan Marston Assigned To: Shane Bryzak Fix For: The future I have set up a page with restricted authority, and exception handlers for NotLoggedInException and AuthorizationException in pages.xml as follows: <?xml version="1.0" encoding="UTF-8"?> <pages xmlns="http://jboss.com/products/seam/pages" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://jboss.com/products/seam/pages http://jboss.com/products/seam/pages-2.0.xsd" login-view-id="/login.xhtml"> <page view-id="/restricted.xhtml" login-required="true"/> <page view-id="/noauthority.xhtml" login-required="true"> <restrict>>#{s:hasRole('admin')}</restrict> </page> <!-- Exception pages --> <exception class="org.jboss.seam.security.NotLoggedInException"> <redirect view-id="/error.xhtml"> <message>You need to be logged to view this page.</message> </redirect> </exception> <exception class="org.jboss.seam.security.AuthorizationException"> <redirect view-id="/error.xhtml"> <message>You don't have security permissions</message> </redirect> </exception> <exception> <redirect view-id="/error.xhtml"> <message>An exception occured</message> </redirect> </exception> </pages> The restricted.xhtml requires you to be logged in, and noauthority.xhtml requires admin authority. Everything works as expected on Sun JVM under Windows, but our s390x mainframe requires us to use the IBM JVM, where it fails to handle the AuthorizationException when accessing noauthority.xhtml. The exception is generated, but uncaught, as can be seen in the log file: [ERROR] uncaught exception org.jboss.seam.security.AuthorizationException: Authorization check failed for expression [>#{s:hasRole('admin')}] Unlike on Sun's JRE, the exception is repeated as being "swallowed": [ERROR] swallowing exception org.jboss.seam.security.AuthorizationException: Authorization check failed for expression [>#{s:hasRole('admin')}] The same happened for the NotLoggedInException, until I added a login-view-id attribute to the <pages> element in pages.xml. Other exception types are handled by the catch-all handler I set up - just NotLoggedInException and AuthorizationException are ignored.