Forward to unauthorized page ?

[boy18nj]

In my application portal, there are many applications running. I am looking for a functionality where if the user is not authorized to see the current page contents or even have not the required role, then divert the user to the unauthorized.xhtml. I want to achieve this minimal impact on all the applications.

Example in my current page-

            <s:decorate id="codeBrandField" template="layout/edit.xhtml" rendered="#{isUserInRole['admin']}">
                <ui:define name="label">Code brand</ui:define>
                <h:inputText id="codeBrand"
                       disabled="#{codeBrandsHome.managed}"
                       required="true"
                           size="50"
                      maxlength="50"
                          value="#{codeBrandsHome.instance.codeBrand}">
                    <a:support event="onblur" reRender="codeBrandField" bypassUpdates="true" ajaxSingle="true"/>
                </h:inputText>
            </s:decorate>

if the user do not have the role admin, i want to divert the user to the page unauthorized.xhtml. I do not want to put navigation inside the .page.xml of each page. I just want to centralize it into a custom tag functionality or can be in central .page.xml More preferred is custom tag functioanlity.

[ilya_shaikovsky]

check please this cool blog post.

[boy18nj]

thanks Ilya, i did not find anything related to what i was looking.

[ilya_shaikovsky]

sorry, but missed the main idea after first reading I talked about not logged user And you talking about roles check.

so how about just not render elements conditionally if user has no role for that? It could be achieved by using #{rich:isUserInRole(role)} function in rendered attribute.

[boy18nj]

thanks Ilya, yes I could use this, but i need this a central functionality of application, I donot want to include this tag all over my .page.xml's. I just want to use it at 1 place for all pages.