> From: Yong Bakos [mailto:[EMAIL PROTECTED] 
> Subject: where tomcat stores Principals (StandardSession.notes?)
> 
> During forms authentication, does the FormAuthenticator store a
> Principal in the Session via setNote()?

Yes, in the authenticate() method.

> If so, does the notes map serve as a "dude, totally private" Map to
> hold relevant objects that are separate from session attributes?

It's not totally private, just protected, so you could probably sneak in
your own subclass to do extra dirty work.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to