Thanks Petros, your example is one of a few I've been working with. My main issue now is where to assign the principal to an ASO, so I don't have to look it up in the security context all the time.
This is a normal/proper thing to do, right? In my previous non-Acegi applications where a user logged in, I stored a user object (that held all the user details) as an ASO. Looking up the Acegi principal from the security context all the time seems like a hassle. In your example, your "shell" component ends up calling "getTapestryPrincipal()". I think what I want to do is have that kind of method called immediately after a successful login. Should I redirect to a common loginsuccess page, or can I do something immediately after the link gets returned from this function: private Link getLink() { System.out.println("onSuccessFromLoginForm"); System.out.println("request.getContextPath() " + request.getContextPath()); Link link = new LinkImpl(response, request.getContextPath(), "j_acegi_security_check"); link.addParameter("j_username", username); link.addParameter("j_password", password); return link; } --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]