[DELTASPIKE-450] Secured ViewConfig's are not working as documented

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 0.5
• Component/s: Core, Security-Module
• Environment: Glassfish 4 / Weld 2.0.4
• Assignee: Gerhard Petracek
• Reporter: John Schneider
• Created: 24/Nov/13 01:04
• Updated: 20/Mar/14 07:44
• Resolved: 05/Dec/13 10:20

Description

I believe this is the documented method for securing pages, but the following view configuration does not invoke an AccessDecisionVoter.
@View(navigation = NavigationMode.REDIRECT)
public interface Pages extends ViewConfig {

class LogIn implements Pages {}

@Secured(value = ApplicationAccessDecisionVoter.class, errorView = LogIn.class)
class Manage implements Pages {}
}

I also tried with a @Sterotype @Secured annotation which I've confirmed to be working perfectly when placed on a CDI business method.

@Retention(RetentionPolicy.RUNTIME)
@Target(

{ElementType.TYPE, ElementType.METHOD, ElementType.FIELD}

)
@Documented
@Stereotype
@Secured(value = ApplicationAccessDecisionVoter.class, errorView = LogIn.class)
public @interface LoggedIn {
}

@View(navigation = NavigationMode.REDIRECT)
public interface Pages extends ViewConfig {
class LogIn implements Pages {}

@LoggedIn
class Manage implements Pages {}
}