Org.springframework.security.access.AccessDeniedException: Access is denied

Pessoal tenho uma aplicação que dá o seguinte problema no console do Tomcat.

org.springframework.security.access.AccessDeniedException: Access is denied at org.springframework.security.access.vote.AffirmativeBased.decide(AffirmativeBased.java:71) ~[spring-security-core-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.access.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:204) ~[spring-security-core-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:106) ~[spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:83) ~[spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:97) ~[spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:100) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:78) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:112) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:35) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:187) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:105) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:79) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:168) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE] at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237) [spring-web-3.0.7.RELEASE.jar:3.0.7.RELEASE] at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167) [spring-web-3.0.7.RELEASE.jar:3.0.7.RELEASE] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) [catalina.jar:7.0.27] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) [catalina.jar:7.0.27] at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:225) [catalina.jar:7.0.27] at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169) [catalina.jar:7.0.27] at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472) [catalina.jar:7.0.27] at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168) [catalina.jar:7.0.27] at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98) [catalina.jar:7.0.27] at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927) [catalina.jar:7.0.27] at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) [catalina.jar:7.0.27] at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407) [catalina.jar:7.0.27] at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:999) [tomcat-coyote.jar:7.0.27] at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:565) [tomcat-coyote.jar:7.0.27] at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:307) [tomcat-coyote.jar:7.0.27] at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [na:1.7.0_02] at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [na:1.7.0_02] at java.lang.Thread.run(Unknown Source) [na:1.7.0_02] 10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - DefaultSavedRequest added to Session: DefaultSavedRequest[http://localhost:8080/FinanceiroWeb/admin/principal.jsf] 10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Calling Authentication entry point. 10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.web.DefaultRedirectStrategy - Redirecting to 'http://localhost:8080/FinanceiroWeb/publico/login.jsf;jsessionid=4A6E67DBB0498EE944F1BB124C532176' 10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession. 10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created. 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals) 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals) 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf;jsessionid=4A6E67DBB0498EE944F1BB124C532176 (property not equals) 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter' 10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter' 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor' 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true 10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit 10:16:19.703 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing 10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection 10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit 10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection 10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection 10:16:19.704 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally 10:16:19.705 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession. 10:16:19.705 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created. 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals) 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals) 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf (property not equals) 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS' 10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter' 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter' 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor' 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain 10:16:28.667 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin 10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection 10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection 10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true 10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit 10:16:28.677 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing 10:16:28.679 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection 10:16:28.679 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit 10:16:28.680 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection 10:16:28.680 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection 10:16:28.681 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally 10:16:28.681 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession. 10:16:28.681 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter' 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created. 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter' 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter' 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter' 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals) 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals) 10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf (property not equals) 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false 10:16:37.762 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false 10:16:37.762 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted 10:16:37.763 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain 10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin 10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection 10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection 10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true 10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit 10:16:37.780 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing 10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection 10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit 10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection 10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection 10:16:37.782 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally 10:16:37.782 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession. 10:16:37.782 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed 10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true 10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter' 10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT 10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created. 10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals) 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals) 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf (property not equals) 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter' 10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor' 10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf' 10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false 10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false 10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted 10:16:46.459 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain 10:16:46.459 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin 10:16:46.459 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection 10:16:46.460 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection 10:16:46.460 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true 10:16:46.460 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit 10:16:46.471 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing 10:16:46.473 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection 10:16:46.473 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit 10:16:46.473 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection 10:16:46.474 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection 10:16:46.474 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally 10:16:46.474 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession. 10:16:46.474 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed

Bom e quando tento logar a página não direciona para a página de logado e as páginas adm e restrito, conforme a permissão do usuário cadastrado.

A classe principal do admin é :

[code]<?xml version="1.0" encoding="ISO-8859-1" ?>

Cadastro de Usuários

Cadastro de Usuários

A listagem a seguir exibe a relação de todos os usuários do sistema. Você poderá realizar ativação e desativação, edição e exclusão para os usuários. Listagem de Usuários Final da Listagem Código #{usuario.codigo} Nome #{usuario.nome} e-Mail #{usuario.email} Permissões [/code]

A classe principal da parte restrita é:

[code]<?xml version="1.0" encoding="ISO-8859-1" ?>

Principal

Gerenciador Financeiro Pessoal

Usuário logado #{request.remoteUser}
<br />
<h:form>
	<sec:ifAnyGranted roles="ROLE_ADMINISTRADOR">
		<h:commandLink action="/admin/principal" title="Administrativo" >
			<h:graphicImage library="imagens" name="administrativo16.png" />
		</h:commandLink>
	</sec:ifAnyGranted>
	
	<a onclick="document.location='#{request.contextPath}/j_spring_security_logout'" title="Sair">
		<h:graphicImage library="imagens" name="logout16.png" />
	</a>
</h:form>

</h:body>

[/code]

A classe applicationContext-security.xml é:

<?xml version="1.0" encoding="UTF-8"?> <b:beans xmlns="http://www.springframework.org/schema/security" xmlns:b="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.xsd"> <http> <intercept-url pattern="/admin/**" access="ROLE_ADMINISTRADOR" /> <intercept-url pattern="/restrito/**" access="ROLE_USUARIO" /> <form-login login-page="/publico/login.jsf" always-use-default-target="true" default-target-url="/restrito/principal.jsf" authentication-failure-url="/publico/login.jsf?login_error=1" /> <logout/> <remember-me /> </http> <authentication-manager> <authentication-provider> <password-encoder hash="md5"/> <jdbc-user-service data-source-ref="financeiroDataSource" authorities-by-username-query="SELECT u.email, p.permissao FROM usuario u, usuario_permissao p WHERE u.codigo = p.usuario AND u.email = ?" users-by-username-query="SELECT email, senha, ativo FROM usuario WHERE email = ?" /> </authentication-provider> </authentication-manager> </b:beans>

e a classe applicationContext.xml é:

<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> <bean id="financeiroDataSource" class="org.springframework.jndi.JndiObjectFactoryBean"> <property name="jndiName"> <value>java:comp/env/jdbc/FinanceiroDB</value> </property> </bean> </beans>

A página de login é:

[code]<?xml version="1.0" encoding="ISO-8859-1" ?>

Login
<h:panelGroup rendered="#{!empty param.login_error}">
	<span style="font-color:red"> Erro ao efetuar o login.</span><br />
	<br/>
	Motivo: #{SPRING_SECURITY_LAST_EXCEPTION.message}
</h:panelGroup>

<h:form id="login" method="post" action="#{request.contextPath}/j_spring_security_check">
<table>
	<tr><td>Login</td>
		<td><input type='text' name='j_username'/></td></tr>
	<tr><td>Senha</td>
		<td><input type='password' name='j_password'/></td></tr>
	<tr><td align="right"><input type="checkbox" name="_spring_security_remember_me"/></td>
	<td>Entrar automaticamente</td></tr>
	<tr><td></td>
	<td><input type="submit" value="Entrar"/></td>
	</tr>		
</table>
	<script>
		document.getElementById("login").j_username.value = "#{SPRING_SECURITY_LAST_USERNAME}";
	</script>
</h:form>

</h:body>

[/code]

Por que será que a página não direcona para as páginas seguintes e não sai da página de login? Parece que nega acesso e retona para ela.