NotLoggedInException

[vwiencek]

Hello,

I've a xhtml page using a session bean to acces my entities. When I trying to access some entities, sometimes, for some entities, I need to be identified ...

When I throw a NotLoggedInException, I get an error on the page. Why is'nt that exception caught by seam, to force a redirection to login.xhtml ?

I can't use @Restrict, because I need to execute the method and query the entity to know if it is restricted.

@Unwrap
 public Wedding getWedding() {
 if (wedding != null && wedding.getSiteName().equals(name))
 return wedding;
 try{
 wedding = (Wedding)em
 .createQuery("from Wedding where siteName like :name")
 .setParameter("name", name)
 .getSingleResult();

 if (wedding.getIsPrivate()){
 if (currentUser == null ||
 !currentUser.isAllowedToView(wedding)) {
 log.info("must be loggued");
 throw new org.jboss.seam.security.NotLoggedInException();
 }
 }

 return wedding;
 }
 catch (NoResultException e) {
 log.info("no existing wedding");
 }
 return null;
 }

Is my code/question stupide ?

Thx
Vincent

[monkeyden]

Why not just raise the "org.jboss.seam.notLoggedIn" event? I make good use of Seam's authenthication model and I have never had to throw the exception myself.

[vwiencek]

ohhhhh yeah baby !!!

I'm not used to the event model !!

Thx, works fine for me now :)

[monkeyden]

Definitely consider creating custom events as well. The decoupling it gives you can help to simplify extremely complex business rules.

[mmichalek]

If you did need to handle this exception, you can map it in pages.xml:

 <exception class="org.jboss.seam.security.NotLoggedInException">
 <redirect view-id="/login.xhtml">
 <message severity="warn">
 You must be logged in to use this feature
 </message>
 </redirect>
 </exception>