Hi Les, > The easiest solution for this is to use the WebSubject.Builder when > your underlying SessionManager is web-only, and it should work fine. > (Shiro 'native' SessionManagers can function both with and without web > requests, but the ServletContainer-based ones cannot - they are web > only).
But to use WebSubject, it requires that I pass in httpServletRequest and httpServletResponse parameters, which I don't have!! (I don't have these parameters because as part of one web request, I'm trying to determine the roles of another user, part of our backoffice section.) Is there a back-door? > P.S. You can also avoid this problem by not using/creating a Session > with the built Subject. Can you explain this? I don't see an API that let's me create a Subject without a corresponding session. Dan -- View this message in context: http://shiro-user.582556.n2.nabble.com/Subject-being-changed-tp7370203p7370919.html Sent from the Shiro User mailing list archive at Nabble.com.
