[ https://issues.apache.org/jira/browse/MYFACES-3719?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Leonardo Uribe resolved MYFACES-3719. ------------------------------------- Resolution: Fixed Fix Version/s: 2.1.13 2.0.19 Assignee: Leonardo Uribe I agree it is absurd to allow the event on server side. Disabled should means disabled in both sides. > Executing action of a disabled Button > ------------------------------------- > > Key: MYFACES-3719 > URL: https://issues.apache.org/jira/browse/MYFACES-3719 > Project: MyFaces Core > Issue Type: Bug > Affects Versions: 2.1.11 > Reporter: dennis hoersch > Assignee: Leonardo Uribe > Fix For: 2.0.19, 2.1.13 > > > I have a commandButton with a specific action which is disabled. The button > is rendered with a disabled attribute and gets a bit different onclick script. > Problem is, when the user removes the disabled and onclick attributes, with > for example Firebug, it is possible to click the button. And JSF does not > prevent the action from being executed. > I expected that the execution is prevented also on server-side. -- This message was sent by Atlassian JIRA (v6.1#6144)