Security Cannot authorize taskflow "VIEW"

Question

I have setup a sql authenticator in Weblogic and built the tables.
I have the login screen, welcome page and a taskflowCall to the menu page. (all ADF)
I can get to the login and back to the welcome screen and navigate to the menu.
I have verified the login user and the roles (POESSA_OWNER, roles: ADMIN, authenticated-role, valid-user)
I have setup the adf security - user - POESSA_OWNER, Enterprise Role: ADMIN Application Role: AppRole1 and assigned ADMIN as a member of the AppRole1.
I then went to the application and assigned AppRole1 to the taskflowCall and checked the view checkbox (default).
In the tables (sql Authenticator) I have a username of POESSA_OWNER, assigned to the role "ADMIN".
When I do the login - I use the authenticator to retrieve the username, roles and authorized (as in some of the examples.
When I do the navigation call to the menu - it fails.
In ADF you cannot use the forwarding - it needs to be calls using taskflows.
So my login is a 'dialog:login' and I use the return handler to navigate based on the result:
I do not use golinks - it is all command buttons and actions.
The testIt routine just prints the user info to the system.out (this is all OK and everything is present (UserName and roles - exactly as expected)
the authenticator is the first in the realm and all are marked "Sufficient" - the interface in the administrator works (I can add, delete, and otherwise manage the data in the tables)
public void handleReturn(ReturnEvent event) {
if (event.getReturnValue() != null) {
FacesContext fContext = FacesContext.getCurrentInstance();
AdfFacesContext.getCurrentInstance().addPartialTarget(getUIComponent("cb1"));
result = event.getReturnValue().toString();
if (result.equals("success")) {
testIt();
Application application = fContext.getApplication();
NavigationHandler navHandler = application.getNavigationHandler();
try {
navHandler.handleNavigation(fContext, null, "enterMenu");
} catch (Exception ex) {
FacesMessage msg = new FacesMessage(FacesMessage.SEVERITY_ERROR, "Authorization Error", "Not Authorized for this function");
fContext.addMessage(null, msg);
The error I get (if not intercepted) says the username is not authorized for the function"VIEW".
Have I missed something? are there issues using the navigation handler?

Answer 1

John,
My apologies - I did not mean to confuse you - I meant there was no need to secure the actual screens (I understood the task flow is what is secured - not the individual items - screens and such).
So in my scenario - where I have a task flow call from the unbound to a bound flow - I would just secure the task flow call.
In my case it is from the welcome screen to the menu page - with the task flow call being "enterMenu".
I would need one security grant (ADMIN) - to the "enterMenu" task flow call - or will I also need another grant on the bound flow itself?
I would assume that the grant on the task flow call would be smart enough to imply the bound task flow has the same level of security.
(Sorry - hard to get the names syntactically correct) - As I understand it - a task flow call terminates with a task flow.
This is what I have done so far.
Am I missing something or should this work.
Remember - I am using a Sql Authenticator to do the login (though it seems to be correct up to the point of the call - there could be issues in the way I have done the security).