5 Replies Latest reply on May 18, 2010 10:18 AM by Andreas Hoffmann

    Secure direct access to pageflow pages if no conversation is started

    Canny Duck Newbie

      Hi,


      lets look at a snippet of the newUser pageflow definition of the DVD store example.


          ...
          <start-state name="start">
              <transition to="account"/>
          </start-state>
          
          <page name="account" view-id="/newuser/account.xhtml">
              <redirect/>
              <transition name="next" to="checkPassword" />
          </page>
      
          <decision name="checkPassword" expression="#{editCustomer.validNamePassword}">
              <transition name="true" to="contact"/>
              <transition name="false" to="account">
                  <!-- <action name="#{editCustomer.warnPassword}" /> action is never triggered -->
              </transition>
          </decision>
      
      
          <page name="contact" view-id="/newuser/contact.xhtml"
                no-conversation-view-id="/newuser/account.xhtml">
              <redirect/>
              <transition name="prev" to="account"/>
              <transition name="next" to="card"/>
          </page>
          ...
      



      It is possible to access the contact view directly via URL, if there is no conversation started. So I can jump in the middle of a conversation, nor there is an acitve conversation.
      Is there a way to prevent that?


      Best regards


      CannyDuck