#seam-dev: SEAMFACES-33
Meeting started by bleathem at 18:00:51 UTC
(full logs).
Meeting summary
- which faces event/phase to listen for, to invoke a security check (bleathem, 18:02:45)
- we want the security check to take place before
any side effects can occur (bleathem,
18:03:44)
- viewAction is a source of side effects
(bleathem,
18:04:30)
- ACTION: we want to
add a dummy view parameter programatically so that the viewAction
is always called (bleathem,
18:05:12)
- We want to allow the end user to specify if
security should be enforced before/after viewActions are
called (bleathem,
18:06:17)
- ACTION: We will need
Seam Security qualifiers for this (bleathem,
18:06:32)
- ACTION: We will need
Seam Security qualifiers for enforcing security before/after
viewActions are called (bleathem,
18:07:20)
- ACTION: implement/resurrect the PreRenderViewEventProcessor
chain / SystemEventProcessor to allow sequencing of system events
listeners (bleathem,
18:10:10)
- adding a dummy UIViewParameter (bleathem, 18:11:58)
- if we override ViewHandler, then we can return
a wrapped version of the ViewDeclarationLanguage (mojavelinux,
18:12:04)
- when createMetadataView is called, we delegate
to parent, then, if there are components in the view metadata, but
no UIViewParameter, we add a dummy instance (mojavelinux,
18:12:44)
- we override view handler by using
<view-handler> in faces-config.xml (mojavelinux,
18:13:21)
- mojavelinux: we could go lower and provide a
custom ViewDeclarationLanguageFactory and wrap the
ViewDeclarationLanguage instead (bleathem,
18:15:11)
- createMetadataView is always called
(mojavelinux,
18:15:23)
- ACTION: file jira for
adding dummy UIViewParameter if there are other non-UIViewParameter
children in the metadata view (mojavelinux,
18:17:17)
- where to hook in security restrictions (mojavelinux, 18:17:45)
- disregard first topic on hooking in seam
security in favor of subsequent info lines (mojavelinux,
18:18:42)
- IDEA: mojavelinux fire
an event for post create metadata view (bleathem,
18:21:00)
- ACTION: fire pre and
post create-metadata-view events (bleathem,
18:21:53)
- http://javaserverfaces.java.net/nonav/docs/2.0/pdldocs/facelets/f/metadata.html
(bleathem,
18:25:15)
- you can use ui:include inside of
<f:metadata> (mojavelinux,
18:26:41)
- IDEA: mojavelinux: we
could provide view actions view @ViewConfig! (bleathem,
18:28:17)
- IDEA: mojavelinux: we
need to have a security "on-postback" flag - that determines if it's
enforced on postback or not (default true) (bleathem,
18:36:19)
- view actions are the opposite, default
onPostack=false (bleathem,
18:36:41)
- IDEA: timing for
security enforcement is initial | postback = AFTER_RESTORE |
BEFORE_INVOKE | BEFORE_RENDER (mojavelinux,
18:46:30)
- IDEA: default timing is
initial = BEFORE_RENDER, postback = AFTER_RESTORE (mojavelinux,
18:46:48)
- IDEA: postback coud be
BEFORE_INVOKE rather than AFTER_RESTORE - no side effects, yet
viewParams are all present (bleathem,
18:49:25)
- (bleathem,
18:59:52)
- IDEA: use the exisitng
Faces qualifiers to qualify the Seam Security annotations (eg.
@RenderResponse_ (bleathem,
19:12:03)
- Naming convention (bleathem, 19:17:58)
- IDEA: rename @ViewMeta
to @ViewPattern (bleathem,
19:18:19)
- IDEA: , one can suport
@ViewPatterns({@ViewPattern("/admin/*"),
@ViewPattern("/admin.xhtml")}) (bleathem,
19:18:34)
- IDEA: or maybe instead
@ViewMapping({"/admin/*", "/admin.xhtml"}) (bleathem,
19:21:00)
- ACTION: renamve
@ViewMeta to @ViewMapping (bleathem,
19:25:10)
- ACTION: rename
@ViewMetaStore to @ViewConfigStore (bleathem,
19:25:25)
Meeting ended at 19:27:25 UTC
(full logs).
Action items
- we want to add a dummy view parameter programatically so that the viewAction is always called
- We will need Seam Security qualifiers for this
- We will need Seam Security qualifiers for enforcing security before/after viewActions are called
- implement/resurrect the PreRenderViewEventProcessor chain / SystemEventProcessor to allow sequencing of system events listeners
- file jira for adding dummy UIViewParameter if there are other non-UIViewParameter children in the metadata view
- fire pre and post create-metadata-view events
- renamve @ViewMeta to @ViewMapping
- rename @ViewMetaStore to @ViewConfigStore
People present (lines said)
- mojavelinux (268)
- bleathem (173)
- jbossbot (11)
- jbott (4)
- lightguard_jp (3)
- kenfinnigan (2)
- johnament_away (1)
Generated by MeetBot 0.1.4.