Looks sound to me, except perhaps for the following:

>        final IPersonAttributes mappedPerson = new NamedPersonImpl(username,
> this.backingMap);

You might consider sending a copy of the map instead of the original
to prevent a client tampering with the map, which would be reflected
in subsequent attribute retrieval calls.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to