[jbossseam-issues] [JBoss JIRA] Updated: (JBSEAM-801) Strange exceptions when accessing a restricted page without being logged in

[Gavin King (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBSEAM-801?page=all ]

Gavin King updated JBSEAM-801:
------------------------------

    Fix Version/s: 1.1.7.GA
         Assignee: Shane Bryzak

LOL!

We definitely should not put EL into exception messages! ;-)

> Strange exceptions when accessing a restricted page without being logged in
> ---------------------------------------------------------------------------
>
>                 Key: JBSEAM-801
>                 URL: http://jira.jboss.com/jira/browse/JBSEAM-801
>             Project: JBoss Seam
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 1.1.6.GA
>            Reporter: Stephan Bublava
>         Assigned To: Shane Bryzak
>            Priority: Minor
>             Fix For: 1.1.7.GA
>
>
> When trying to access a restricted page without being logged in, Seam logs two strange exceptions and then redirects to the login page:
> 09:34:06,604 INFO  [Lifecycle] starting up: org.jboss.seam.security.identity
> 09:34:08,997 INFO  [Pages] reading pages.xml
> 09:34:09,255 ERROR [SeamPhaseListener] uncaught exception
> org.jboss.seam.security.NotLoggedInException: Error evaluating expression [#{s:hasPermission('/fee/*', 'render', null)}] - User not logged in
>         at org.jboss.seam.security.Identity.checkRestriction(Identity.java:169)
>         at org.jboss.seam.pages.Page.enter(Page.java:186)
>         at org.jboss.seam.core.Pages.enterPage(Pages.java:239)
>         at org.jboss.seam.jsf.AbstractSeamPhaseListener.enterPage(AbstractSeamPhaseListener.java:242)
>         at org.jboss.seam.jsf.AbstractSeamPhaseListener.beforeRender(AbstractSeamPhaseListener.java:193)
>         at org.jboss.seam.jsf.SeamPhaseListener.beforePhase(SeamPhaseListener.java:57)
>         at com.sun.faces.lifecycle.LifecycleImpl.phase(LifecycleImpl.java:218)
>         at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:144)
>         at javax.faces.webapp.FacesServlet.service(FacesServlet.java:245)
>         ...
> 09:34:09,270 INFO  [Exceptions] reading exception mappings from /WEB-INF/pages.xml
> 09:34:09,323 WARN  [Interpolator] exception interpolating string: Error evaluating expression [#{s:hasPermission('/fee/*', 'render', null)}] - User not logged in
> javax.faces.el.ReferenceSyntaxException: javax.el.ELException: Expression uses functions, but no FunctionMapper was provided
>         at com.sun.faces.application.ApplicationImpl.createValueBinding(ApplicationImpl.java:498)
>         at org.jboss.seam.jsf.SeamApplication11.createValueBinding(SeamApplication11.java:114)
>         at org.jboss.seam.core.Expressions$1.getFacesValueBinding(Expressions.java:71)
>         at org.jboss.seam.core.Expressions$1.getValue(Expressions.java:53)
>         at org.jboss.seam.core.Interpolator.interpolateExpressions(Interpolator.java:88)
>         at org.jboss.seam.core.Interpolator.interpolate(Interpolator.java:67)
>         at org.jboss.seam.core.FacesMessages.createFacesMessage(FacesMessages.java:318)
>         at org.jboss.seam.core.FacesMessages$2.run(FacesMessages.java:222)
>         at org.jboss.seam.core.FacesMessages.runTasks(FacesMessages.java:132)
>         at org.jboss.seam.core.FacesMessages.afterPhase(FacesMessages.java:142)
>         at org.jboss.seam.jsf.SeamPhaseListener.afterPhase(SeamPhaseListener.java:109)
>         at com.sun.faces.lifecycle.LifecycleImpl.phase(LifecycleImpl.java:278)
>         at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:144)
>         at javax.faces.webapp.FacesServlet.service(FacesServlet.java:245)
>         ...
> NotLoggedInException is declared in pages.xml:
> 	<exception class="org.jboss.seam.security.NotLoggedInException">
> 		<end-conversation />
> 		<redirect view-id="/login.html" />
> 	</exception>
> I'm using Facelets 1.1.11 and JSF 1.2_03 (in case it makes a difference).

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira