> From: David S. Faller [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 15, 2000 8:42 AM
>
> Is there a specific reason, that the session is not destroyed
> during logout?
Yes. Turbine isn't the only servlet app out there, potentially. Others may
still need the session after the user logs out of Turbine.
> My problem is, that I store user data in the session, but
> after logout these
> user data are available to the 'default' user.
The right way to store nonpersistent data associated with a user is
User.setTemp(), which stores the data inside the turbine.user object in the
session attributes, rather than as a "top level" session attribute.
> I've done a patch, that creates a new session. I could send
> this patch if wanted.
Definitely not wanted, for the reason above. You'd break all other
servlet-based apps.
--
Craig Berry - (310) 570-4140
VP Technology
GlueCode
1452 Second St
Santa Monica CA 90401
------------------------------------------------------------
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Search: <http://www.mail-archive.com/turbine%40list.working-dogs.com/>
Problems?: [EMAIL PROTECTED]