Thank You Julien, it's very clear.

But what about if Main.jsp contains 2 hyperlink.
One is for all authenticathed user and one only for user with admin role.

In a standard web container all user see links, but if a non "admin" user try 
to access to the page authorized only to admin, a std web security exception 
occurs.

In this case, if i must check in the portlet the roles of the user, i should 
forward to different pages, otherwise a "standard" user can access to the admin 
page too! and this is not correct.



View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3871321#3871321

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3871321


-------------------------------------------------------
This SF.net email is sponsored by Microsoft Mobile & Embedded DevCon 2005
Attend MEDC 2005 May 9-12 in Vegas. Learn more about the latest Windows
Embedded(r) & Windows Mobile(tm) platforms, applications & content.  Register
by 3/29 & save $300 http://ads.osdn.com/?ad_id=6883&alloc_id=15149&op=click
_______________________________________________
JBoss-Development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to