TurbineSecurity model, ACL is not updated when the user is changed

[slava zimine <sl...@japgod.mine.nu>]

Hello. 
I've observe the following behavior with turbine security

I log for a second time as a different TURBINE_USER , 
the User obj in RunData is updated  byt  the ACL  in RunData is NOT
updated !

When I log for the first time as a user from TURBINE_USER  table, the
ACL get initialized  correctly.


Is such shortcoming in ACL behaviour  a bug  or a feature? 


In my LogUser  action, which  slightly extends the turbine's Login
action I've put in comments this part

        /*
        if (data.getUserFromSession() != null)
        {
            return;
        }
        */


regards,

Slava



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>