Re: [Acegisecurity-developer] thread-local security context access

2005-08-26 Thread Joseph Dane
I am far from being an Acegi expert, so take this FWIW. Peter Kharchenko <[EMAIL PROTECTED]> writes: > That's what I am currently doing. The ugliness comes in the first > request, when the Context has not yet been placed into the session > (since the filter does it at the end of the request proc

Re: [Acegisecurity-developer] thread-local security context access

2005-08-26 Thread Peter Kharchenko
Joseph, Ben, Joseph Dane wrote: Ben Alex <[EMAIL PROTECTED]> writes: Because the same thread is used for the duration of the HTTP request, and the thread has security information removed from it at the end of each request, there should not be any problem in a large web application. You may

Re: [Acegisecurity-developer] thread-local security context access

2005-08-26 Thread Joseph Dane
Ben Alex <[EMAIL PROTECTED]> writes: > Because the same thread is used for the duration of the HTTP request, > and the thread has security information removed from it at the end of > each request, there should not be any problem in a large web > application. You may like to confirm this yourself b

Re: [Acegisecurity-developer] thread-local security context access

2005-08-26 Thread Ben Alex
Peter Kharchenko wrote: We're working on a large web application, which among other things, relies on thread pools shared across multiple servlet sessions. This appears to present a problem since the same thread may be used to serve different users. At the start of each HTTP request, HttpSes

[Acegisecurity-developer] thread-local security context access

2005-08-24 Thread Peter Kharchenko
Hi, I am new to ACEGI, and have a basic question. ContextHolder, which serves as a primary way of obtaining authentication state, is based on ThreadLocal access. We're working on a large web application, which among other things, relies on thread pools shared across multiple servlet sessions. T