[Yanel-commits] rev 30321 - public/yanel/trunk/src/webapp/src/java/org/wyona/yanel/servlet

[michi at wyona.com]

Author: michi
Date: 2008-01-13 01:00:25 +0100 (Sun, 13 Jan 2008)
New Revision: 30321

Modified:
   public/yanel/trunk/src/webapp/src/java/org/wyona/yanel/servlet/YanelServlet.java
Log:
comment improved

Modified: public/yanel/trunk/src/webapp/src/java/org/wyona/yanel/servlet/YanelServlet.java
===================================================================
--- public/yanel/trunk/src/webapp/src/java/org/wyona/yanel/servlet/YanelServlet.java	2008-01-12 23:00:31 UTC (rev 30320)
+++ public/yanel/trunk/src/webapp/src/java/org/wyona/yanel/servlet/YanelServlet.java	2008-01-13 00:00:25 UTC (rev 30321)
@@ -181,7 +181,7 @@
             if(doLogout(request, response) != null) return;
         }
 
-        // Authentication (WARNING: HTTP BASIC/DIGEST ...!)
+        // Authentication (WARNING: Because Yanel supports HTTP BASIC/DIGEST, authentication is done before authorization! TODO: Is this really necessary? Can't the doAuthorize check on HTTP BASIC/DIGEST ...?)
         if(doAuthenticate(request, response) != null) return;
 
         // Check authorization