<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" 	>
<channel>
	<title>Comments on: Securing Spring WebFlow flows in under 500 lines of code</title>
	<atom:link href="http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/</link>
	<description>Scribble, scribble, scribble...</description>
	<lastBuildDate>Thu, 11 Mar 2010 14:07:00 +0100</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: JavaPulse &#187; Spring Web Flow and Acegi</title>
		<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/comment-page-1/#comment-77390</link>
		<dc:creator>JavaPulse &#187; Spring Web Flow and Acegi</dc:creator>
		<pubDate>Fri, 17 Aug 2007 15:01:02 +0000</pubDate>
		<guid isPermaLink="false">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/#comment-77390</guid>
		<description>[...] http://opensource.atlassian.com/projects/spring/browse/SWF-93 http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-co... http://www.ervacon.com/products/swf/intro/index.html http://www.springframework.org/webflow [...]</description>
		<content:encoded><![CDATA[<p>[...] <a href="http://opensource.atlassian.com/projects/spring/browse/SWF-93" rel="nofollow" onclick="pageTracker._trackPageview('/outgoing/opensource.atlassian.com/projects/spring/browse/SWF-93?referer=');">http://opensource.atlassian.com/projects/spring/browse/SWF-93</a> <a href="http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-co.." rel="nofollow">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-co..</a>. <a href="http://www.ervacon.com/products/swf/intro/index.html" rel="nofollow" onclick="pageTracker._trackPageview('/outgoing/www.ervacon.com/products/swf/intro/index.html?referer=');">http://www.ervacon.com/products/swf/intro/index.html</a> <a href="http://www.springframework.org/webflow" rel="nofollow" onclick="pageTracker._trackPageview('/outgoing/www.springframework.org/webflow?referer=');">http://www.springframework.org/webflow</a> [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mane</title>
		<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/comment-page-1/#comment-59607</link>
		<dc:creator>Mane</dc:creator>
		<pubDate>Tue, 03 Jul 2007 12:55:33 +0000</pubDate>
		<guid isPermaLink="false">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/#comment-59607</guid>
		<description>Hi,
Thanks for this solution. Are there any plans to bundle it either with Spring WebFlow or Acegi Security distribution jars?</description>
		<content:encoded><![CDATA[<p>Hi,<br />
Thanks for this solution. Are there any plans to bundle it either with Spring WebFlow or Acegi Security distribution jars?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Owain Davies</title>
		<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/comment-page-1/#comment-46509</link>
		<dc:creator>Owain Davies</dc:creator>
		<pubDate>Wed, 09 May 2007 07:41:06 +0000</pubDate>
		<guid isPermaLink="false">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/#comment-46509</guid>
		<description>Same as above i&#039;m not quite sure how to tie in the FlowSecurityInterceptor with the filter chain??? should i be thinking about using a proxy over some object from the webflow framework?

Thanks</description>
		<content:encoded><![CDATA[<p>Same as above i&#8217;m not quite sure how to tie in the FlowSecurityInterceptor with the filter chain??? should i be thinking about using a proxy over some object from the webflow framework?</p>
<p>Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Keith Lyall</title>
		<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/comment-page-1/#comment-46292</link>
		<dc:creator>Keith Lyall</dc:creator>
		<pubDate>Mon, 07 May 2007 15:30:03 +0000</pubDate>
		<guid isPermaLink="false">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/#comment-46292</guid>
		<description>Just starting to use Spring Webflow after having used Spring MVC and Acegi for a while but found security of flows to be a bit of an issue.

This looks exactly the sort of solution that I am looking for but when I took the code into my Spring 2.0.4 / Acegi 1.0.3 project I got the following error: 

rg.springframework.beans.factory.BeanNotOfRequiredTypeException: Bean named &#039;flowSecurityInterceptor&#039; must be of type [javax.servlet.Filter], but was actually of type [org.springframework.webflow.security.FlowSecurityInterceptor]

I am not sure if i have configured this correctly. This is what I have done:

    
        
            
                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
                PATTERN_TYPE_APACHE_ANT
                /**=...,flowSecurityInterceptor
            
...

     
        
        
         
             
                 example-flow=ROLE_EXAMPLE_LIST
         
     

Any suggestions?

Thanks in advance for the help.</description>
		<content:encoded><![CDATA[<p>Just starting to use Spring Webflow after having used Spring MVC and Acegi for a while but found security of flows to be a bit of an issue.</p>
<p>This looks exactly the sort of solution that I am looking for but when I took the code into my Spring 2.0.4 / Acegi 1.0.3 project I got the following error: </p>
<p>rg.springframework.beans.factory.BeanNotOfRequiredTypeException: Bean named &#8216;flowSecurityInterceptor&#8217; must be of type [javax.servlet.Filter], but was actually of type [org.springframework.webflow.security.FlowSecurityInterceptor]</p>
<p>I am not sure if i have configured this correctly. This is what I have done:</p>
<p>                CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON<br />
                PATTERN_TYPE_APACHE_ANT<br />
                /**=&#8230;,flowSecurityInterceptor</p>
<p>&#8230;</p>
<p>                 example-flow=ROLE_EXAMPLE_LIST</p>
<p>Any suggestions?</p>
<p>Thanks in advance for the help.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Paco Hernández</title>
		<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/comment-page-1/#comment-37198</link>
		<dc:creator>Paco Hernández</dc:creator>
		<pubDate>Thu, 22 Mar 2007 15:51:09 +0000</pubDate>
		<guid isPermaLink="false">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/#comment-37198</guid>
		<description>Sorry, the solution didn&#039;t appear because of the XML tags??</description>
		<content:encoded><![CDATA[<p>Sorry, the solution didn&#8217;t appear because of the XML tags??</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Paco Hernández</title>
		<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/comment-page-1/#comment-37197</link>
		<dc:creator>Paco Hernández</dc:creator>
		<pubDate>Thu, 22 Mar 2007 15:48:33 +0000</pubDate>
		<guid isPermaLink="false">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/#comment-37197</guid>
		<description>Hi again.

The problem was that we use webflow integrated with JSF. Then, the JSF integration does not use the flow executor at all, it fits in executor service logic across JSF Phase Listener methods.

The solution is:

	
		
		
		
		
			
				...-flow=ROLE_USER,...
				...-flow=ROLE_SUPERVISOR
			
		
	

	
		
	

	
		
	

Thanks again for this elegant solution. ;-)</description>
		<content:encoded><![CDATA[<p>Hi again.</p>
<p>The problem was that we use webflow integrated with JSF. Then, the JSF integration does not use the flow executor at all, it fits in executor service logic across JSF Phase Listener methods.</p>
<p>The solution is:</p>
<p>				&#8230;-flow=ROLE_USER,&#8230;<br />
				&#8230;-flow=ROLE_SUPERVISOR</p>
<p>Thanks again for this elegant solution. <img src='http://blog.arendsen.net/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Paco Hernández</title>
		<link>http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/comment-page-1/#comment-37080</link>
		<dc:creator>Paco Hernández</dc:creator>
		<pubDate>Wed, 21 Mar 2007 17:48:28 +0000</pubDate>
		<guid isPermaLink="false">http://blog.arendsen.net/index.php/2007/02/08/securing-spring-webflow-flows-in-under-500-lines-of-code/#comment-37080</guid>
		<description>Thanks for this solution for integrating Acegi and SWF.

Please, could you post a spring configuration example?

Thanks again.</description>
		<content:encoded><![CDATA[<p>Thanks for this solution for integrating Acegi and SWF.</p>
<p>Please, could you post a spring configuration example?</p>
<p>Thanks again.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
