DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12549>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12549

j_security_check is not handled correctly when authenticated





------- Additional Comments From [EMAIL PROTECTED]  2002-10-31 19:32 -------
What is the expected behavior when an authenticated user attempts to access
j_security_check?  I can imagine several scenarios:
1. The user types it into the address bar.
2. The user accesses the login form directly (possibly to log in as a different
user).
3. As a result of a 302 redirect.

I may be missing some more.  I would be happy to work on a patch for this if I
knew what should happen here.

Developers: Shouldn't this code be moved to FormAuthenticator and accessed via a
protected method?

--
To unsubscribe, e-mail:   <mailto:tomcat-dev-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@;jakarta.apache.org>

Reply via email to