I am new to JBoss and the portal. A search of related keywords didn't show any postings about this so I'd like to ask a question about the 2.4.2 version of the portal. I need a portlet that deals with user accounts. I find the user register/subscription model to be inappropriate for corporate use. I am planning to turn off anonymous user subscriptions. Meanwhile, I'd like to have the admin user log in and create new users and their profiles. It isn't clear to me how to program this. Here's some thoughts.... In UserModuleImpl.java there is a createUser method that calls session.save(user). If called from a new user (not the admin) trying to create a new account for himself it makes sense to have the current session save this. But does it make sense, or is it safe, for the admin's current session to save the UserModuleImpl object of a user other than himself? I haven't yet found any programming guides around how to program user management using sessions. I don't understand sessions and what objects can be placed in them. Hints would be appreciated. Thanks ahead, View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4036115#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...