I just rewrote my very old ProtectedPageGateKeeper that implemented Dispatcher with a new one inspired by Howard's blog http://tapestryjava.blogspot.com/search/label/security
The new one implements ComponentRequestFilter and is better suited for protecting ajax enabled pages. So I thought ... Now to my problem: The redirect that takes place after an ajax call seems to disappear into thin air. I.e. the page displaying a rollling ajax loader is not redirected to my /noacess page. I have to hit a full page refresh for the redirect to work. Is there some trick needed in order to get the redirect to work for an ajax call. Sorry for asking stupid newbie questions ... of course I have missed something again! Thanks in advance! Gunnar Eketrapp 2011-08-22 21:54:53.243 [btpool0-11] DEBUG u.s.UtskicketModule.RequestLogger - Request: /group/members.grid.pager/1/grid (Method=POST, browser=Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0, isXHR=true) 2011-08-22 21:54:53.243 [btpool0-11] DEBUG u.services.ProtectedPageGateKeeper2 - Page path: /group/members.grid.pager/1/grid 2011-08-22 22:01:06.500 [btpool0-10] DEBUG u.s.UtskicketModule.RequestLogger - Request: /group/members.grid.pager/7/grid (Method=POST, browser=Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0, isXHR=true) 2011-08-22 22:01:06.500 [btpool0-10] DEBUG u.services.ProtectedPageGateKeeper2 - Page path: /group/members.grid.pager/7/grid 2011-08-22 22:01:06.500 [btpool0-10] DEBUG u.s.UtskicketModule.RequestLogger - Request: /noaccess (Method=GET, browser=Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0, isXHR=false) Note: The return from the request above does not show up in the browser ... 2011-08-22 22:01:56.956 [btpool0-10] DEBUG u.s.UtskicketModule.RequestLogger - Request: /group/members/3 (Method=GET, browser=Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0, isXHR=false) 2011-08-22 22:01:56.960 [btpool0-10] DEBUG u.services.ProtectedPageGateKeeper2 - Page path: /group/members/3 2011-08-22 22:01:56.964 [btpool0-10] DEBUG u.s.UtskicketModule.RequestLogger - Request: /noaccess (Method=GET, browser=Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0, isXHR=false) Note: Now we get to the /noaccess page