Hi
I Know this is an old post – but I’m having the exact same problem.
I’m using PrettyFaces (I know I should convert to ReWrite but haven’t had time) and everything in my application is accessible when prettyfaces is activated – even though some areas require specific roles 🙁
Can you confirm that the fixed error also is present in the PrettyFaces.
Here is my pom config
<dependency>
<groupId>org.ocpsoft.rewrite</groupId>
<artifactId>rewrite-servlet</artifactId>
<version>2.0.10.Final</version>
</dependency>
<dependency>
<groupId>org.ocpsoft.rewrite</groupId>
<artifactId>rewrite-config-prettyfaces</artifactId>
<version>2.0.10.Final</version>
</dependency>