I am still not entirely satisfied with my setup, it works fine, but from a security perspective, is not as fine-grained as I would like.
I am a ContextFilter that automatically wraps every request in a Seam Context unless the SeamPhaseListeners gets to it first.
Is there anyway to disable the SeamPhaseListener or override its behavior such that a context is open for every request?
I audit every request with a servlet filter. Since I persist this data to a database, I need an active context to get an entity manager as well as transaction.
I would like all requests to go through a front controller, and then the front controller delegate out.
Retrieving data ...