Thank You Julien, it's very clear. But what about if Main.jsp contains 2 hyperlink. One is for all authenticathed user and one only for user with admin role.
In a standard web container all user see links, but if a non "admin" user try to access to the page authorized only to admin, a std web security exception occurs. In this case, if i must check in the portlet the roles of the user, i should forward to different pages, otherwise a "standard" user can access to the admin page too! and this is not correct. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3871321#3871321 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3871321 ------------------------------------------------------- This SF.net email is sponsored by Microsoft Mobile & Embedded DevCon 2005 Attend MEDC 2005 May 9-12 in Vegas. Learn more about the latest Windows Embedded(r) & Windows Mobile(tm) platforms, applications & content. Register by 3/29 & save $300 http://ads.osdn.com/?ad_id=6883&alloc_id=15149&op=click _______________________________________________ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
