View Access Control
Controlling which users can navigate to which views.
View access control decides whether the current user may navigate to a view. It works the same way in Spring applications and in plain servlet applications, and is the foundation that the setup pages of both build on.
Vaadin provides the following tools for it:
-
Navigation access control checks every navigation against a set of rules, and redirects users who aren’t logged in to the log-in view.
-
Access annotations on view classes, such as
@RolesAllowed, are the most common way to define the rules. -
Custom access checkers define rules of your own, for example based on the data that a view shows. See Custom Navigation Access Checker.
-
Error views define what users see when navigation is denied.
Topics
- Navigation Access Control
- Explains navigation access control and how it can be customized.
- Annotation-Based Access Control
- Controlling which users can navigate to which views with access annotations.
- Access-Denied & Not-Found Views
- Customizing the views shown when navigation to a view is denied or the view doesn't exist.