<html><body bgcolor="#FFFFFF"><div>Great! I will test this today.</div><div><br></div><div>Thanks a lot,</div><div>Cheers</div><div>Balz<br><br><div><br></div>_____________________<div><a href="http://www.zwischengas.com">www.zwischengas.com</a></div><div><br></div><div>Sent from my iPhone<div>My latest Fotos: </div><div><a href="http://tinyurl.com/lm2010pics">http://tinyurl.com/lm2010pics</a></div></div></div><div><br>On 17.12.2010, at 00:36, Michael Wechner <<a href="mailto:michael.wechner@wyona.com">michael.wechner@wyona.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>
Hi Balz<br>
<br>
I have now added a new utility method to<br>
<br>
Sending
src/webapp/src/java/org/wyona/yanel/servlet/YanelServlet.java<br>
Transmitting file data .<br>
Committed revision 55546.<br>
<br>
public static void setIdentity(Identity identity, HttpSession
session, Realm realm)<br>
<br>
by using it for example with<br>
<br>
User user =
realm.getIdentityManager().getUserManager().getUser(trueUserId,
true);<br>
YanelServlet.setIdentity(new Identity(user, username), session,
realm);<br>
<br>
because the constructor<br>
<br>
new Identity(User, String)<br>
<br>
will resolve the groups again.<br>
<br>
HTH<br>
<br>
Michael<br>
<br>
On 12/15/10 12:54 PM, Balz Schreier wrote:
<blockquote cite="mid:AANLkTi=o6qvPDWPCk_noUmH89pm4WY+mdF-NBLgDw_uP@mail.gmail.com" type="cite">Hi Michael,
<div>I fully understand the performance reasons and I think this
has to be like this. I actually just wanted to know whether I
have missed any API possibility to update the groups.</div>
<div><br>
</div>
<div>So my suggestion would be to extend the Yanel Core API with a
new method, where the whole group and other security stuff is
redone again and attached to the session (Maybe we can reuse the
very same code that does the initial stuff).</div>
<div><br>
</div>
<div>What do you think?</div>
<div><br>
<div class="gmail_quote">On Wed, Dec 15, 2010 at 11:43 AM,
Michael Wechner <span dir="ltr"><<a moz-do-not-send="true" href="mailto:michael.wechner@wyona.com"><a href="mailto:michael.wechner@wyona.com">michael.wechner@wyona.com</a></a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">Hi Balu
<div class="im"><br>
<br>
On 12/15/10 10:03 AM, Balz Schreier wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">
Hi,<br>
<br>
I have the usecase where a user gets assigned a new
group while he is logged in.<br>
I noticed that Yanel reflects this change only after a
login of that user, means as long as the user stays
logged in, the user does not benefit from the new
assignment yet.<br>
</blockquote>
<br>
</div>
the reason for that is that for performance reasons the
groups (and its parents and parents) are loaded<br>
during login and attached to the session, because these are
used for access control, and since every "html request" has
many other requests as a consequence it's good to have this
"cached".<br>
<br>
Now when you update the group settings the sessions are not
being touched and hence one<br>
does not notice such a change.<br>
<br>
I am not saying that this is good, but the question is how
we can do this better, but please see below ...
<div class="im"><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">
<br>
Question: How can I tell Yanel to reinitialize the User
(Identity) and its Groups ?<br>
</blockquote>
<br>
</div>
- we could try to change the session<br>
- we could change the implementation by using
conf/ehcache.xml instead the sessions.<br>
<br>
Any other suggestions?<br>
<br>
Thanks<br>
<br>
Michael<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">
<br>
Thanks<br>
Cheers<br>
Balz<br>
</blockquote>
<br>
-- <br>
Yanel-development mailing list <a moz-do-not-send="true" href="mailto:Yanel-development@wyona.com" target="_blank"><a href="mailto:Yanel-development@wyona.com">Yanel-development@wyona.com</a></a><br>
<a moz-do-not-send="true" href="http://lists.wyona.org/cgi-bin/mailman/listinfo/yanel-development" target="_blank"><a href="http://lists.wyona.org/cgi-bin/mailman/listinfo/yanel-development">http://lists.wyona.org/cgi-bin/mailman/listinfo/yanel-development</a></a><br>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</div></blockquote><blockquote type="cite"><div><span>-- </span><br><span>Yanel-development mailing list <a href="mailto:Yanel-development@wyona.com"><a href="mailto:Yanel-development@wyona.com">Yanel-development@wyona.com</a></a></span><br><span><a href="http://lists.wyona.org/cgi-bin/mailman/listinfo/yanel-development">http://lists.wyona.org/cgi-bin/mailman/listinfo/yanel-development</a></span></div></blockquote></body></html>