org.springframework.security.access.AccessDeniedException: Access is denied
at org.springframework.security.access.vote.AffirmativeBased.decide(AffirmativeBased.java:71) ~[spring-security-core-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.access.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:204) ~[spring-security-core-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:106) ~[spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:83) ~[spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:97) ~[spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:100) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:78) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:112) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:35) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:187) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:105) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:79) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:381) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:168) [spring-security-web-3.0.8.RELEASE.jar:3.0.8.RELEASE]
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237) [spring-web-3.0.7.RELEASE.jar:3.0.7.RELEASE]
at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167) [spring-web-3.0.7.RELEASE.jar:3.0.7.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) [catalina.jar:7.0.27]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) [catalina.jar:7.0.27]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:225) [catalina.jar:7.0.27]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169) [catalina.jar:7.0.27]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472) [catalina.jar:7.0.27]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168) [catalina.jar:7.0.27]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98) [catalina.jar:7.0.27]
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927) [catalina.jar:7.0.27]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) [catalina.jar:7.0.27]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407) [catalina.jar:7.0.27]
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:999) [tomcat-coyote.jar:7.0.27]
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:565) [tomcat-coyote.jar:7.0.27]
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:307) [tomcat-coyote.jar:7.0.27]
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [na:1.7.0_02]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [na:1.7.0_02]
at java.lang.Thread.run(Unknown Source) [na:1.7.0_02]
10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - DefaultSavedRequest added to Session: DefaultSavedRequest[http://localhost:8080/FinanceiroWeb/admin/principal.jsf]
10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Calling Authentication entry point.
10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.web.DefaultRedirectStrategy - Redirecting to 'http://localhost:8080/FinanceiroWeb/publico/login.jsf;jsessionid=4A6E67DBB0498EE944F1BB124C532176'
10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession.
10:16:19.690 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created.
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals)
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals)
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf;jsessionid=4A6E67DBB0498EE944F1BB124C532176 (property not equals)
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter'
10:16:19.696 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true
10:16:19.697 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit
10:16:19.703 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing
10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection
10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit
10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection
10:16:19.704 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection
10:16:19.704 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally
10:16:19.705 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession.
10:16:19.705 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created.
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals)
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals)
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf (property not equals)
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS'
10:16:28.666 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter'
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain
10:16:28.667 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin
10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection
10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection
10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true
10:16:28.668 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit
10:16:28.677 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing
10:16:28.679 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection
10:16:28.679 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit
10:16:28.680 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection
10:16:28.680 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection
10:16:28.681 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally
10:16:28.681 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession.
10:16:28.681 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created.
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter'
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals)
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals)
10:16:37.760 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf (property not equals)
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:37.761 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false
10:16:37.762 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false
10:16:37.762 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted
10:16:37.763 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain
10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin
10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection
10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection
10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true
10:16:37.763 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit
10:16:37.780 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing
10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection
10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit
10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection
10:16:37.781 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection
10:16:37.782 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally
10:16:37.782 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession.
10:16:37.782 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - Candidate is: '/publico/login.jsf'; pattern is /**; matched=true
10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 1 of 10 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - HttpSession returned null object for SPRING_SECURITY_CONTEXT
10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - No SecurityContext was available from the HttpSession: org.apache.catalina.session.StandardSessionFacade@9d7a2e. A new one will be created.
10:16:46.456 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 2 of 10 in additional filter chain; firing Filter: 'LogoutFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 3 of 10 in additional filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 4 of 10 in additional filter chain; firing Filter: 'RequestCacheAwareFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - pathInfo: both null (property equals)
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - queryString: both null (property equals)
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.DefaultSavedRequest - requestURI: arg1=/FinanceiroWeb/admin/principal.jsf; arg2=/FinanceiroWeb/publico/login.jsf (property not equals)
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.s.HttpSessionRequestCache - saved request doesn't match
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 5 of 10 in additional filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 6 of 10 in additional filter chain; firing Filter: 'RememberMeAuthenticationFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 7 of 10 in additional filter chain; firing Filter: 'AnonymousAuthenticationFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.AnonymousAuthenticationFilter - Populated SecurityContextHolder with anonymous token: 'org.springframework.security.authentication.AnonymousAuthenticationToken@6faa3d44: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: 4A6E67DBB0498EE944F1BB124C532176; Granted Authorities: ROLE_ANONYMOUS'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 8 of 10 in additional filter chain; firing Filter: 'SessionManagementFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 9 of 10 in additional filter chain; firing Filter: 'ExceptionTranslationFilter'
10:16:46.457 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf at position 10 of 10 in additional filter chain; firing Filter: 'FilterSecurityInterceptor'
10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Converted URL to lowercase, from: '/publico/login.jsf'; to: '/publico/login.jsf'
10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /admin/**; matched=false
10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.DefaultFilterInvocationSecurityMetadataSource - Candidate is: '/publico/login.jsf'; pattern is /restrito/**; matched=false
10:16:46.458 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.i.FilterSecurityInterceptor - Public object - authentication not attempted
10:16:46.459 [http-bio-8080-exec-7] DEBUG o.s.security.web.FilterChainProxy - /publico/login.jsf reached end of additional filter chain; proceeding with original chain
10:16:46.459 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - begin
10:16:46.459 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtaining JDBC connection
10:16:46.460 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Obtained JDBC connection
10:16:46.460 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - initial autocommit status: true
10:16:46.460 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - disabling autocommit
10:16:46.471 [http-bio-8080-exec-7] DEBUG o.h.e.t.spi.AbstractTransactionImpl - committing
10:16:46.473 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - committed JDBC Connection
10:16:46.473 [http-bio-8080-exec-7] DEBUG o.h.e.t.i.jdbc.JdbcTransaction - re-enabling autocommit
10:16:46.473 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Releasing JDBC connection
10:16:46.474 [http-bio-8080-exec-7] DEBUG o.h.e.j.i.LogicalConnectionImpl - Released JDBC connection
10:16:46.474 [http-bio-8080-exec-7] DEBUG o.s.s.w.a.ExceptionTranslationFilter - Chain processed normally
10:16:46.474 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext is empty or anonymous - context will not be stored in HttpSession.
10:16:46.474 [http-bio-8080-exec-7] DEBUG o.s.s.w.c.SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
Bom e quando tento logar a página não direciona para a página de logado e as páginas adm e restrito, conforme a permissão do usuário cadastrado.
A classe principal do admin é :<?xml version="1.0" encoding="ISO-8859-1" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:f="http://java.sun.com/jsf/core">
<h:head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title>Cadastro de Usuários</title>
</h:head>
<h:body>
<h1>Cadastro de Usuários</h1>
<h:form>
<h:messages />
<h:dataTable value="#{usuarioBean.lista}" var="usuario" rules="rows"
cellpadding="5">
<f:facet name="caption">
A listagem a seguir exibe a relação de todos os usuários do sistema. Você poderá realizar ativação e desativação, edição e exclusão para os usuários.
</f:facet>
<f:facet name="header">Listagem de Usuários</f:facet>
<f:facet name="footer">Final da Listagem</f:facet>
<h:column>
<h:commandLink action="#{usuarioBean.ativar}">
<h:graphicImage library="imagens"
name="usuario_ativo_#{usuario.ativo}.png" style="border:0" />
<f:setPropertyActionListener target="#{usuarioBean.usuario}"
value="#{usuario}" />
</h:commandLink>
</h:column>
<h:column>
<f:facet name="header">Código</f:facet>
#{usuario.codigo}
</h:column>
<h:column>
<h:graphicImage library="imagens"
name="bandeira_#{usuario.idioma}.png" />
</h:column>
<h:column>
<f:facet name="header">Nome</f:facet>
#{usuario.nome}
</h:column>
<h:column>
<f:facet name="header">e-Mail</f:facet>
<a href="mailto:#{usuario.email}">#{usuario.email}</a>
</h:column>
<h:column>
<h:commandLink action="#{usuarioBean.editar}">
<h:graphicImage library="imagens" name="editar16.png"
style="border:0" />
<f:setPropertyActionListener target="#{usuarioBean.usuario}"
value="#{usuario}" />
<f:setPropertyActionListener target="#{usuarioBean.destinoSalvar}"
value="/admin/principal" />
</h:commandLink>
</h:column>
<h:column>
<h:commandLink action="#{usuarioBean.excluir}"
onclick="if (!confirm(confirma a exclusão do usuário #{usuario.nome}?)) return false;">
<h:graphicImage library="imagens" name="excluir16.png"
style="border:0" />
<f:setPropertyActionListener target="#{usuarioBean.usuario}"
value="#{usuario}" />
</h:commandLink>
</h:column>
<h:column>
<f:facet name="header">Permissões</f:facet>
<h:commandLink
action="#{usuarioBean.atribuiPermissao(usuario, 'ROLE_ADMINISTRADOR')}"
title="Permissão Administrador">
<h:graphicImage library="imagens"
name="ROLE_ADMINISTRADOR_#{usuario.permissao.contains('ROLE_ADMINISTRADOR')}.png"
style="border:0" />
</h:commandLink>
<h:commandLink action="#{usuarioBean.atribuiPermissao(usuario,'ROLE_USUARIO_VIP')}"
title="Permissão Usuário VIP" >
<h:graphicImage library="imagens"
name="ROLE_USUARIO_VIP_#{usuario.permissao.contains('ROLE_USUARIO_VIP')}.png"
style="border:0"/>
</h:commandLink>
</h:column>
</h:dataTable>
</h:form>
</h:body>
</html>
<?xml version="1.0" encoding="ISO-8859-1" ?>
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:sec="http://www.springframework.org/security/facelets/tags">
<h:head>
<title>Principal</title>
</h:head>
<h:body>
<h1>Gerenciador Financeiro Pessoal</h1>
Usuário logado #{request.remoteUser}
<br />
<h:form>
<sec:ifAnyGranted roles="ROLE_ADMINISTRADOR">
<h:commandLink action="/admin/principal" title="Administrativo" >
<h:graphicImage library="imagens" name="administrativo16.png" />
</h:commandLink>
</sec:ifAnyGranted>
<a onclick="document.location='#{request.contextPath}/j_spring_security_logout'" title="Sair">
<h:graphicImage library="imagens" name="logout16.png" />
</a>
</h:form>
</h:body>
</html>
<?xml version="1.0" encoding="UTF-8"?>
<b:beans xmlns="http://www.springframework.org/schema/security"
xmlns:b="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-3.0.xsd">
<http>
<intercept-url pattern="/admin/**" access="ROLE_ADMINISTRADOR" />
<intercept-url pattern="/restrito/**" access="ROLE_USUARIO" />
<form-login login-page="/publico/login.jsf"
always-use-default-target="true"
default-target-url="/restrito/principal.jsf"
authentication-failure-url="/publico/login.jsf?login_error=1" />
<logout/>
<remember-me />
</http>
<authentication-manager>
<authentication-provider>
<password-encoder hash="md5"/>
<jdbc-user-service data-source-ref="financeiroDataSource"
authorities-by-username-query="SELECT u.email, p.permissao
FROM usuario u, usuario_permissao p
WHERE u.codigo = p.usuario
AND u.email = ?"
users-by-username-query="SELECT email, senha, ativo
FROM usuario
WHERE email = ?" />
</authentication-provider>
</authentication-manager>
</b:beans>
<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd">
<bean id="financeiroDataSource" class="org.springframework.jndi.JndiObjectFactoryBean">
<property name="jndiName">
<value>java:comp/env/jdbc/FinanceiroDB</value>
</property>
</bean>
</beans>
<?xml version="1.0" encoding="ISO-8859-1" ?>
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:f="http://java.sun.com/jsf/core">
<h:head>
<title>Login</title>
</h:head>
<h:body>
<h:form>
<h:commandButton action="#{usuarioBean.novo}" value="Registre-se" />
</h:form>
<h:panelGroup rendered="#{!empty param.login_error}">
<span style="font-color:red"> Erro ao efetuar o login.</span><br />
<br/>
Motivo: #{SPRING_SECURITY_LAST_EXCEPTION.message}
</h:panelGroup>
<h:form id="login" method="post" action="#{request.contextPath}/j_spring_security_check">
<table>
<tr><td>Login</td>
<td><input type='text' name='j_username'/></td></tr>
<tr><td>Senha</td>
<td><input type='password' name='j_password'/></td></tr>
<tr><td align="right"><input type="checkbox" name="_spring_security_remember_me"/></td>
<td>Entrar automaticamente</td></tr>
<tr><td></td>
<td><input type="submit" value="Entrar"/></td>
</tr>
</table>
<script>
document.getElementById("login").j_username.value = "#{SPRING_SECURITY_LAST_USERNAME}";
</script>
</h:form>
</h:body>
</html>
Por que será que a página não direcona para as páginas seguintes e não sai da página de login? Parece que nega acesso e retona para ela.