Does your user have direct access to HttpSession object from a browser? On 7 Oct 2005 05:54:30 -0000, vineesh . kumar <[EMAIL PROTECTED]> wrote: > > Hi all, > I have to maintain some information throuh out whole session from a user > login to user logout. For accomplishing this, I hav to maintain a userid and > permission values throughout the whole session. > So what i need to know is, is there any way so that i can create a session > with these values and retrieve these values from the session, so that the > user will not come to know that the session contains his uid and permissions? > regards > vineesh >
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]