DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12549>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12549 j_security_check is not handled correctly when authenticated ------- Additional Comments From [EMAIL PROTECTED] 2002-10-31 19:32 ------- What is the expected behavior when an authenticated user attempts to access j_security_check? I can imagine several scenarios: 1. The user types it into the address bar. 2. The user accesses the login form directly (possibly to log in as a different user). 3. As a result of a 302 redirect. I may be missing some more. I would be happy to work on a patch for this if I knew what should happen here. Developers: Shouldn't this code be moved to FormAuthenticator and accessed via a protected method? -- To unsubscribe, e-mail: <mailto:tomcat-dev-unsubscribe@;jakarta.apache.org> For additional commands, e-mail: <mailto:tomcat-dev-help@;jakarta.apache.org>