[DELTASPIKE-664] SecurityViolation are evaluated twice for redirect pages with configured errorView

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.0.1
• Component/s: Security-Module
• Assignee: Gerhard Petracek
• Reporter: Philip Herbst
• Created: 11/Jul/14 23:19
• Updated: 16/Jul/14 15:33
• Resolved: 13/Jul/14 00:40

Description

I modified deltaspike-jsf-example to reproduce the behaviour

Modification to org.apache.deltaspike.example.viewconfig.Pages

    @Secured(value = DenyAllAccessDecisionVoter.class, 
             errorView = ViewConfigFolder.Error.class)
    public interface SecuredPages extends ViewConfig, RedirectedPages {}
...
    public class Error implements ViewConfig {}

errror.xhtml

    <h:form>
   	  <h:messages />
    </h:form>

Result: Error message is shown twice on error page.