details: /erp/devel/pi/rev/e2616479f44e
changeset: 6465:e2616479f44e
user: Stefan Hühner <stefan.huehner <at> openbravo.com>
date: Fri Feb 19 13:45:50 2010 +0100
summary: Fixed 12362: don't execute old request after redirect to login page
If the users session is timed-out (or force-logged out) redirect to
login page as usual, but don't continue executing the old request
as its not useful and can't work correctly
diffstat:
src/org/openbravo/base/secureApp/HttpSecureAppServlet.java | 6 ++++++
1 files changed, 6 insertions(+), 0 deletions(-)
diffs (16 lines):
diff -r 6b8d9ce301fd -r e2616479f44e
src/org/openbravo/base/secureApp/HttpSecureAppServlet.java
--- a/src/org/openbravo/base/secureApp/HttpSecureAppServlet.java Fri Feb
19 11:59:53 2010 +0100
+++ b/src/org/openbravo/base/secureApp/HttpSecureAppServlet.java Fri Feb
19 13:45:50 2010 +0100
@@ -192,6 +192,12 @@
OBContext.enableAsAdminContext();
strUserAuth = m_AuthManager.authenticate(request, response);
+
+ if (strUserAuth == null) {
+ // auth-manager return null after redirecting to the login page ->
stop request-processing
+ return;
+ }
+
variables = new Variables(request); // Rebuild variable, auth-mgr could
set the role
boolean loggedOK = false;
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Openbravo-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openbravo-commits