You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@deltaspike.apache.org by "Ron Smeral (JIRA)" <ji...@apache.org> on 2014/09/12 15:05:33 UTC

[jira] [Updated] (DELTASPIKE-717) Exception handlers not invoked when @Secured ViewConfig is violated in an app with JSF module without a DefaultErrorView page

     [ https://issues.apache.org/jira/browse/DELTASPIKE-717?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ron Smeral updated DELTASPIKE-717:
----------------------------------
    Attachment: ds-ade-ignored-reproducer.zip

> Exception handlers not invoked when @Secured ViewConfig is violated in an app with JSF module without a DefaultErrorView page
> -----------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DELTASPIKE-717
>                 URL: https://issues.apache.org/jira/browse/DELTASPIKE-717
>             Project: DeltaSpike
>          Issue Type: Bug
>          Components: JSF-Module
>    Affects Versions: 1.0.2
>            Reporter: Ron Smeral
>         Attachments: ds-ade-ignored-reproducer.zip
>
>
> Conditions: 
> * application bundles the JSF module
> * an AccessDeniedException occurs on a @Secured ViewConfig
> * the app does *not* have a DefaultErrorView extending page.
> Actual result:
> Exception handlers don't get invoked.
> Expected result:
> Exception handlers should get invoked. The JSF/Security integration shouldn't insist on the presence of the default error view. Even the doc currently says: _It's *possible* to mark one view-config class as default error-view_. (not _obligatory_ to mark...)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)