This is more of a java servlet/session question, but it's also
referring AppEngine's user service:
Is there a way of invalidating a certain user's session ?
for example, an admin modifies a certain user's  permissions and
because of that, i need to invalidate that user's session.
Can i do this with standard java classes like HttpSession,
ServletContext etc. Or if i use app engine's user service, can i
invalidate in the admin's call another's user google session (to force
him to login to google again?)

PS. regardin ah_SESSION objects, are they cleaned by the app engine's
mechanism? (when i call session.invalidate()) or do i have ti build my
own logic to clean them?

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine for Java" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.

Reply via email to