Securing Java Server Faces

by Robert Shore

The J2EE version 6 standard encourages the use of Java Server Faces (JSF) for web applications. However, the structure of a JSF-based application means that the ability to do fine-grained, declarative access control is lost. This paper suggests a mechanism for introducing fine-grained, declarative access control to the JSF world. In addition, this paper suggests a mechanism to enforce the notion of a single session (only one active session per user).

21 pages, Kindle Edition

First published October 1, 2011

About the author

Robert Shore is a journalist, author and playwright. He is the editor of Elephant Magazine, a quarterly magazine on contemporary art and visual culture. He lives with his wife and young son, and is from Mansfield, in the Midlands.