[DELTASPIKE-719] Only one voter invoked if multiple voters are applied through a stereotype

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.2
• Fix Version/s: 1.0.3
• Component/s: JSF-Module
• Assignee: Gerhard Petracek
• Reporter: Ron Smeral
• Created: 12/Sep/14 17:52
• Updated: 24/Sep/14 22:10
• Resolved: 18/Sep/14 21:22

Description

When securing a view using multiple @Secured annotations applied through multiple stereotypes, only one of them is applied. In the following example, only the LoggedIn.Voter is invoked, RolesAllowed.Voter is skipped.

Pages.java

@Folder(name = "/")
public interface Pages extends ViewConfig {

    @LoggedIn
    interface Stereo extends Pages {

        @RolesAllowed("admin") // not invoked at all
        class Secure implements Stereo {
        }
    }
}

This is LoggedIn, and RolesAllowed is analogous...

LoggedIn.java

...
@Stereotype
@Secured(LoggedIn.Voter.class)
public @interface LoggedIn {

    public static class Voter implements AccessDecisionVoter {
    ...