If I go to the unsecured area without an existing session, there is also no principal or subject (both null) as expected.
Daniel
Karr, David wrote:
I'm not sure what problem you're having. Are you saying that after you specify your login when accessing a secured area, you then immediately (before session timeout) access an unsecured area that checks "role=admin" and thinks you don't have that role (I would be surprised if it did that)? Or is your first access (without an existing session) to the unsecured area? If that's the case, then there definitely won't be an existing principal. Did you think there would be?
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
