> From: David S. Faller [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 15, 2000 8:42 AM
>
> Is there a specific reason, that the session is not destroyed 
> during logout?

Yes.  Turbine isn't the only servlet app out there, potentially.  Others may
still need the session after the user logs out of Turbine.
 
> My problem is, that I store user data in the session, but 
> after logout these
> user data are available to the 'default' user.

The right way to store nonpersistent data associated with a user is
User.setTemp(), which stores the data inside the turbine.user object in the
session attributes, rather than as a "top level" session attribute.

> I've done a patch, that creates a new session. I could send 
> this patch if wanted.

Definitely not wanted, for the reason above.  You'd break all other
servlet-based apps.

-- 
Craig Berry - (310) 570-4140
VP Technology
GlueCode
1452 Second St
Santa Monica CA 90401



------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Search: <http://www.mail-archive.com/turbine%40list.working-dogs.com/>
Problems?:           [EMAIL PROTECTED]

Reply via email to