FWIW, I also tried securing my services layer by using a servlet Filter 
(same way that I'm using a PersistenceFilter to manage by 
EntityManager{Factory}).

I was hoping to query the user's session for a "loggedInUser" object, but 
was stymied by the fact that the Filter interface only has a ServletRequest, 
not an HttpServletRequest, and thus no access to the user's session. If 
anyone knows a solution to this, please share.  (Hmm, now I'm wondering if 
the ServletRequest can simply be cast to an HttpServletRequest...)






-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.

Reply via email to