[mapguide-trac] #73: Obtain username, group, and role from the MapGuide session identifier

[MapGuide Open Source]

#73: Obtain username, group, and role from the MapGuide session identifier
-------------------------+--------------------------------------------------
 Reporter:  trevorwekel  |         Owner:  trevorwekel
     Type:  enhancement  |        Status:  new        
 Priority:  medium       |     Milestone:  1.3        
Component:  Web API      |       Version:  1.2.0      
 Severity:  minor        |    Resolution:             
 Keywords:               |   External_id:             
-------------------------+--------------------------------------------------
Comment (by jbirch):

 Just wanted to make sure that there's a note here about not encoding the
 user/grop/role into the session ID directly.

 I believe that it's possible possible to change the user identified with a
 session during its lifetime.  In my scenario, user comes into map as
 unpriveledged user (Anonymous), and then may log in.  In this case, user
 must not lose any session-based resources stored in the current session.

 It would be better to have some kind of resource within the session
 repository which encodes the sessions current user/group/role, and make
 this accessible with something like a GetUserInfo call against the session
 resource ID.

-- 
Ticket URL: <http://trac.osgeo.org/mapguide/ticket/73#comment:3>
MapGuide Open Source <http://mapguide.osgeo.org/>
MapGuide Open Source Internals