details:   /erp/devel/pi/rev/e2616479f44e
changeset: 6465:e2616479f44e
user:      Stefan Hühner <stefan.huehner <at> openbravo.com>
date:      Fri Feb 19 13:45:50 2010 +0100
summary:   Fixed 12362: don't execute old request after redirect to login page
If the users session is timed-out (or force-logged out) redirect to
login page as usual, but don't continue executing the old request
as its not useful and can't work correctly

diffstat:

 src/org/openbravo/base/secureApp/HttpSecureAppServlet.java |  6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)

diffs (16 lines):

diff -r 6b8d9ce301fd -r e2616479f44e 
src/org/openbravo/base/secureApp/HttpSecureAppServlet.java
--- a/src/org/openbravo/base/secureApp/HttpSecureAppServlet.java        Fri Feb 
19 11:59:53 2010 +0100
+++ b/src/org/openbravo/base/secureApp/HttpSecureAppServlet.java        Fri Feb 
19 13:45:50 2010 +0100
@@ -192,6 +192,12 @@
       OBContext.enableAsAdminContext();
 
       strUserAuth = m_AuthManager.authenticate(request, response);
+
+      if (strUserAuth == null) {
+        // auth-manager return null after redirecting to the login page -> 
stop request-processing
+        return;
+      }
+
       variables = new Variables(request); // Rebuild variable, auth-mgr could 
set the role
 
       boolean loggedOK = false;

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Openbravo-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openbravo-commits

Reply via email to