Do you have a userCache configured in security.xml? If so, you might try removing it.
Matt On 7/31/07, sionsmith <[EMAIL PROTECTED]> wrote: > > Hi Appfuse Users, > > i'm using the acegi security framework to manage the user sessions within my > project, the authentication & user details are returned from a web service - > not the standard DAO's, however it acts the same. > > The problem i have is the user in the SecurityContextHolder context is not > upto date with the 1 in the web service. How can i force this to update > without logging the user out & back in again? > > I cant seem to find a way of updating the Principal in the session without > the need of creating a new Authentication object? Surely i can update the > original which is in the session? > > I've also tried to update this using: > Authentication auth = > SecurityContextHolder.getContext().getAuthentication(); > auth = new UsernamePasswordAuthenticationToken(updatedUser, > updatedUser.getPassword()); > > but that too runs through the login process. i.e. authenticate. > > Any suggestions would be greatful > > Many thank > Sion > > > -- > View this message in context: > http://www.nabble.com/Refershing-User-in-the-SecurityContextHolder-tf4192324s2369.html#a11922038 > Sent from the AppFuse - User mailing list archive at Nabble.com. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- http://raibledesigns.com --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]