May I know which forum to discuss the J2EE security, and JSF question?
I think you'll get more specific information on security at the OTN forums here: http://forums.oracle.com/forums/category.jspa?categoryID=291
For JSF, you should start with the mailing lists linked from here: http://javaserverfaces.java.net/
Your use of this web site or any of its content or software indicates your agreement to be bound by these Terms of Participation.
Copyright © 2014, Oracle and/or its affiliates. All rights reserved. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.