users@glassfish.java.net

security realm/changing groups requires logout/login...

From: Erik Brakkee <erik.brakkee_at_gmail.com>
Date: Sun, 31 Oct 2010 00:09:52 +0200

Hi all,


As part of using flexible JDBC realm (http://flexiblejdbcrealm.wamblee.org/),
a user has encounted behavior where adding or removing a user to certian
groups while the user is logged in does not seem to work. The session will
have to be invalidated or the user will have to logout for the new group
settings to come through. See http://wamblee.org/jira/browse/FLEX-2

The question is now whether this behavior is as it should be or not. I can
imagine that for performance the current behavior is quite good, but is
there a method to force the group changes to come through without the user
having to logout and login again?

Cheers
  Erik