« Return to Thread: how to prevent direct access to jsf pages?

RE: RE: how to prevent direct access to jsf pages?

by lmk () :: Rate this Message:

Reply to Author | View in Thread

Hi Raymond..
I put tempalate file  under /WEB-INF- directory..
I have a page index.xhtml,

<ui:composition template="/WEB-INF/layout/template.xhtml"
        xmlns="http://www.w3.org/1999/xhtml"
        xmlns:ui="http://java.sun.com/jsf/facelets"
        xmlns:h="http://java.sun.com/jsf/html"
        xmlns:f="http://java.sun.com/jsf/core"
        <ui:define name="title">Home</ui:define>
        <ui:define name="body">
                        <h:outputText value="Welcome"></h:outputText>
        </ui:define>
</ui:composition>

navigation rules is like :

  <navigation-rule>
    <from-view-id>/register.xhtml</from-view-id>
    <navigation-case>
      <from-outcome>register</from-outcome>
      <to-view-id>/index.xhtml</to-view-id> <!-- cant put /WEB-INF/index.xhtml-->
    </navigation-case>
  </navigation-rule>

so user after login he can access to URL /index.jsf  himself, I have to  restrict navigation only by JSF action.
using only myfaces without JSF, I can do this,  have I implemete an alternative ResourceResolver.?

I hope that is clear :)

thanks



 « Return to Thread: how to prevent direct access to jsf pages?