On Oct 17, 2007, at 11:31 AM, Ford, Jennifer M. wrote:

I am using the page.security mechanism to secure specific pages and
portlets in our system.  Sometimes, when a page is accessed before the
system is fully up, the Jetspeed portal seems to completely ignore the
page.security file and give users permission to everything.  In the
past, I've been able to mend things by just restarting the system.
However, I just experienced a case where I could not restore permissions
back to what they were with just a shutdown and startup.


Could it be that Tomcat is remembering the last session when the browser send the cookie back ?


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to