#seam-dev: SEAMFACES-33

Meeting started by bleathem at 18:00:51 UTC (full logs).

Meeting summary

  1. which faces event/phase to listen for, to invoke a security check (bleathem, 18:02:45)
    1. we want the security check to take place before any side effects can occur (bleathem, 18:03:44)
    2. viewAction is a source of side effects (bleathem, 18:04:30)
    3. ACTION: we want to add a dummy view parameter programatically so that the viewAction is always called (bleathem, 18:05:12)
    4. We want to allow the end user to specify if security should be enforced before/after viewActions are called (bleathem, 18:06:17)
    5. ACTION: We will need Seam Security qualifiers for this (bleathem, 18:06:32)
    6. ACTION: We will need Seam Security qualifiers for enforcing security before/after viewActions are called (bleathem, 18:07:20)
    7. ACTION: implement/resurrect the PreRenderViewEventProcessor chain / SystemEventProcessor to allow sequencing of system events listeners (bleathem, 18:10:10)

  2. adding a dummy UIViewParameter (bleathem, 18:11:58)
    1. if we override ViewHandler, then we can return a wrapped version of the ViewDeclarationLanguage (mojavelinux, 18:12:04)
    2. when createMetadataView is called, we delegate to parent, then, if there are components in the view metadata, but no UIViewParameter, we add a dummy instance (mojavelinux, 18:12:44)
    3. we override view handler by using <view-handler> in faces-config.xml (mojavelinux, 18:13:21)
    4. mojavelinux: we could go lower and provide a custom ViewDeclarationLanguageFactory and wrap the ViewDeclarationLanguage instead (bleathem, 18:15:11)
    5. createMetadataView is always called (mojavelinux, 18:15:23)
    6. ACTION: file jira for adding dummy UIViewParameter if there are other non-UIViewParameter children in the metadata view (mojavelinux, 18:17:17)

  3. where to hook in security restrictions (mojavelinux, 18:17:45)
    1. disregard first topic on hooking in seam security in favor of subsequent info lines (mojavelinux, 18:18:42)
    2. IDEA: mojavelinux fire an event for post create metadata view (bleathem, 18:21:00)
    3. ACTION: fire pre and post create-metadata-view events (bleathem, 18:21:53)
    4. http://javaserverfaces.java.net/nonav/docs/2.0/pdldocs/facelets/f/metadata.html (bleathem, 18:25:15)
    5. you can use ui:include inside of <f:metadata> (mojavelinux, 18:26:41)
    6. IDEA: mojavelinux: we could provide view actions view @ViewConfig! (bleathem, 18:28:17)
    7. IDEA: mojavelinux: we need to have a security "on-postback" flag - that determines if it's enforced on postback or not (default true) (bleathem, 18:36:19)
    8. view actions are the opposite, default onPostack=false (bleathem, 18:36:41)
    9. IDEA: timing for security enforcement is initial | postback = AFTER_RESTORE | BEFORE_INVOKE | BEFORE_RENDER (mojavelinux, 18:46:30)
    10. IDEA: default timing is initial = BEFORE_RENDER, postback = AFTER_RESTORE (mojavelinux, 18:46:48)
    11. IDEA: postback coud be BEFORE_INVOKE rather than AFTER_RESTORE - no side effects, yet viewParams are all present (bleathem, 18:49:25)
    12. (bleathem, 18:59:52)
    13. IDEA: use the exisitng Faces qualifiers to qualify the Seam Security annotations (eg. @RenderResponse_ (bleathem, 19:12:03)

  4. Naming convention (bleathem, 19:17:58)
    1. IDEA: rename @ViewMeta to @ViewPattern (bleathem, 19:18:19)
    2. IDEA: , one can suport @ViewPatterns({@ViewPattern("/admin/*"), @ViewPattern("/admin.xhtml")}) (bleathem, 19:18:34)
    3. IDEA: or maybe instead @ViewMapping({"/admin/*", "/admin.xhtml"}) (bleathem, 19:21:00)
    4. ACTION: renamve @ViewMeta to @ViewMapping (bleathem, 19:25:10)
    5. ACTION: rename @ViewMetaStore to @ViewConfigStore (bleathem, 19:25:25)


Meeting ended at 19:27:25 UTC (full logs).

Action items

  1. we want to add a dummy view parameter programatically so that the viewAction is always called
  2. We will need Seam Security qualifiers for this
  3. We will need Seam Security qualifiers for enforcing security before/after viewActions are called
  4. implement/resurrect the PreRenderViewEventProcessor chain / SystemEventProcessor to allow sequencing of system events listeners
  5. file jira for adding dummy UIViewParameter if there are other non-UIViewParameter children in the metadata view
  6. fire pre and post create-metadata-view events
  7. renamve @ViewMeta to @ViewMapping
  8. rename @ViewMetaStore to @ViewConfigStore


People present (lines said)

  1. mojavelinux (268)
  2. bleathem (173)
  3. jbossbot (11)
  4. jbott (4)
  5. lightguard_jp (3)
  6. kenfinnigan (2)
  7. johnament_away (1)


Generated by MeetBot 0.1.4.