[DELTASPIKE-717] Exception handlers not invoked when @Secured ViewConfig is violated in an app with JSF module without a DefaultErrorView page

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.0.2
• Fix Version/s: 1.0.3
• Component/s: JSF-Module
• Assignee: Gerhard Petracek
• Reporter: Ron Smeral
• Created: 12/Sep/14 12:51
• Updated: 24/Sep/14 22:10
• Resolved: 12/Sep/14 13:29

Description

Conditions:

• application bundles the JSF module
• an AccessDeniedException occurs on a @Secured ViewConfig
• the app does not have a DefaultErrorView extending page.

Actual result:
Exception handlers don't get invoked.

Expected result:
Exception handlers should get invoked. The JSF/Security integration shouldn't insist on the presence of the default error view. Even the doc currently says: It's possible to mark one view-config class as default error-view. (not obligatory to mark...)