RE: RequestInterceptor authenticate and authorize. Need advise

2001-01-25 Thread Cathy Young
] Subject: Re: RequestInterceptor authenticate and authorize. Need advise "Roytman, Alex" wrote: Hello, As I understand, RequestInterceptor.authenticate() and authorize() get called every time a protected resource is being accessed. Does it mean tomcat do not cache user/r

Re: RequestInterceptor authenticate and authorize. Need advise

2001-01-24 Thread Craig R. McClanahan
"Roytman, Alex" wrote: Hello, As I understand, RequestInterceptor.authenticate() and authorize() get called every time a protected resource is being accessed. Does it mean tomcat do not cache user/roles after first authentication? Tomcat 4.0 caches the authenticated principal in the

RE: RequestInterceptor authenticate and authorize. Need advise

2001-01-24 Thread Roytman, Alex
-Original Message- From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 24, 2001 6:10 PM To: [EMAIL PROTECTED] Subject: Re: RequestInterceptor authenticate and authorize. Need advise "Roytman, Alex" wrote: Hello, As I understand, RequestInterceptor.au

Re: RequestInterceptor authenticate and authorize. Need advise

2001-01-24 Thread Craig R. McClanahan
"Roytman, Alex" wrote: May be I should rephrase my question - when user authenticated first time the fact of authentication and user's name/password/roles are the same across all contexts, does authentication for one context mean authentication for all or each context should authenticate