[jboss-user] [JBoss Seam] - Seam security problem

Stateless Bean do-not-reply at jboss.com
Sun Jun 17 18:24:27 EDT 2007


Hi,
I have seam app, with folder "/myApp/pages/" restricted like:

  |     <page view-id="/pages/*">
  |     	<restrict>#{identity.loggedIn}</restrict> 
  |         <navigation from-action="#{myAction.myMethod}">
  |             <redirect view-id="/main_page.xhtml"/>
  |         </navigation> 
  | 

page access is secured but if i write:
http://localhost:8080/myApp/pages/

I see all of files and folders. How can I prevent this?



View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4055053#4055053

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4055053



More information about the jboss-user mailing list