ok, I can do this tomorrow. Filip
-----Original Message----- From: Remy Maucherat [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 01, 2004 5:09 PM To: Tomcat Developers List Subject: Re: session facade not used for event Filip Hanik - Dev wrote: >>>Facading is likely worthless for sessions, > > you think so, you don't think session.setPrincipal is a security issue? Missed that one ;) As Jean-François said, the security manager will avoid the problem. I think it won't hurt replacing the "this"s with "getSession()"s in the event constructors, though. Rémy --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004 --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
