It shouldn't ever happen because GaeFilter blocks users if they aren't logged in. I'll modify getCurrentUser/getCurrentUserId to throw an exception if the user isn't logged in.
http://gwt-code-reviews.appspot.com/1432801/diff/1/samples/mobilewebapp/src/main/com/google/gwt/sample/mobilewebapp/server/domain/Task.java File samples/mobilewebapp/src/main/com/google/gwt/sample/mobilewebapp/server/domain/Task.java (right): http://gwt-code-reviews.appspot.com/1432801/diff/1/samples/mobilewebapp/src/main/com/google/gwt/sample/mobilewebapp/server/domain/Task.java#newcode48 samples/mobilewebapp/src/main/com/google/gwt/sample/mobilewebapp/server/domain/Task.java:48: } GaeAuthFilter should prevent this from ever happening, but I'll throw an exception for good measure. http://gwt-code-reviews.appspot.com/1432801/ -- http://groups.google.com/group/Google-Web-Toolkit-Contributors
