LoggedInInterceptor

[vk101]

If making a LoggedInInterceptor similar to the one in the Seam documentation, what would you annotate? I noticed that putting it on the session beans doesn't prevent others from viewing the pages. If somebody types in the URL, it i still displayed (and only when the form is submitted to the session bean that is annotated does the interceptor kick in...)

How, using an interceptor, would you prevent people from even viewing certain pages?

[pmuir]

The LoggedInInterceptor only prevents access to the bean (bijection, methods) not to the pages. I would advise you to wait for the Seam Security Framework due out next week for a comprehensive solution.

[vk101]

Where can I read up on the Seam Security Framework in the meantime? (Or where will I be able to read it next week?) I hope this Seam Security Framework will be a well-documented part of Seam...

[pmuir]

The CVS reference manual has incomplete documentation