[jboss-jira] [JBoss JIRA] Commented: (JBWEB-19) Make isUserInRole() and getUserPrincipal() available on unsecured pages

Fri Feb 5 18:56:19 EST 2010

    [ https://jira.jboss.org/jira/browse/JBWEB-19?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12510783#action_12510783 ] 

Remy Maucherat commented on JBWEB-19:
-------------------------------------

You should probably fill up the description of the support issue. It looks random to me because it depends which page you access first. Also something to note is that there might be a performance cost for doing this.

As a side note, I did not understand why you were so eager to flame me. With Jon involved I understand where it comes from a lot better.

> Make isUserInRole() and getUserPrincipal() available on unsecured pages
> -----------------------------------------------------------------------
>
>                 Key: JBWEB-19
>                 URL: https://jira.jboss.org/jira/browse/JBWEB-19
>             Project: JBoss Web
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: Core
>         Environment: Any
>            Reporter: Jeff Schnitzer
>            Assignee: Remy Maucherat
>
> Currently getUserPrincipal() returns null and ServletRequest.isUserInRole() always returns false on unsecured pages, even after the user has been authenticated.
> It would be much more useful if these always returned proper values.  This confusion comes up on the JAAS forums frequently.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira