JSR168 states that portletsession is portlet or applciation scope. Application 
in here is one war file. This is how all portals behave and must behave. If 
jboss would make it possible to share sessions in 'portal scope' it would break 
JSR168 spesification.

I see this good thing because sharing portlet session openly to other 
applications in same portal is Security issue. Even if you mean only to share 
you info with some spesific application, it is exposed fully to others too. 
Sessions can contain all kinds of sensitive data that should not be visible to 
other applicions. If you need to share information among several web 
applications securely it is very easy to set up database for that.

Until there is common and secure way to implement interportlet communication, 
you should stick with this... share information in portletsession in same 
application and use database if you need to distribute info to other 
applications. All kinds of 'proprietary' interportlet commucation methods will 
be outdated once they some standards out.

CrossContextSession has more to do with clustering. It is required to make 
replicating sessions of portlet applications to other cluster node. Correct if 
i am wrong here ;)


View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3929350#3929350

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3929350


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to