I don't think we've decided on this behavior.  I think status page is just a placeholder for now.  I think we'll need to introduce a page error handling concept, my suggestion would be that we redirect back to the referring page and pop up a dialog box stating the denial  of access.  Need a ticket for this.

On Jun 1, 2014, at 7:46 PM, Christopher May wrote:


In Product/Production/Adapters/General/CONNECTAdminGUI/src/main/java/gov/hhs/fha/nhinc/admingui/jee/jsf/UserAuthorizationListener.java:

>          }
>
>          if (!noLoginRequiredPages.contains(currentPage) && currentUser == null) {
>              LOG.debug("login required and current user is null, redirecting to login page.");
>              NavigationHandler nh = facesContext.getApplication().getNavigationHandler();
>              nh.handleNavigation(facesContext, null, LOGIN_PAGE_NAV_OUTCOME);
> -        }else {
> -            //TODO check role here.
> +        }else if(currentUser != null && !roleService.checkRole(formatPageName(currentPage), currentUser)) {
> +            LOG.debug("Current User does not have permission for page, redirecting to status page.");
> +            NavigationHandler nh = facesContext.getApplication().getNavigationHandler();
> +            nh.handleNavigation(facesContext, null, STATUS_PAGE_NAV_OUTCOME);


Does every user have access to the status page? If not, what happens here when they try to access the status page?

—
Reply to this email directly or view it on GitHub<https://github.com/CONNECT-Solution/CONNECT/pull/801/files#r13269055>.