Off topic: is there a way of instructing spring-security not to create a session before authentication (kind of 'no role at all' rather than ROLE_ANONYMOUS)? I am thinking about a web site with big traffic - creation of too many sessions for public pages will really slow it down...
Jonathan Barker wrote: > > IIRC, the default configuration for tapestry-acegi resulted in > ROLE_ANONYMOUS being given to unauthenticated users. That resulted in the > creation of the session. > -- View this message in context: http://www.nabble.com/tapestry-spring-security%3A-how-to-set-ASO-on-successful-login--tp20865863p20888633.html Sent from the Tapestry - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]