Re: [Exist-open] XQueryGenerator take the user and password from the session

[<fre...@aj...>]

 > The sb user should only be taken from the sitemap as parameters or usi=
ng
 > the default value if there is no parameters.

Cocoon user, I'm clearly agree with this point of view. This could be=20
easily replaced by sitemap writings like

<map:generate src=3D"biblio.xq" type=3D"xquery">
   <map:parameter name=3D"user" value=3D"{session-attr:MyExistUserSession=
Att}"/>
   <map:parameter name=3D"password"=20
value=3D"{session-attr:MyExistPasswordSessionAtt}"/>
</map:generate>


> I'm surprised to find this code in the XQueryGenerator :
>=20
>        // check if user and password can be read from the session
>        if (session !=3D null && request.isRequestedSessionIdValid()) {
>            String actualUser =3D getSessionAttribute(session, "user");
>            String actualPass =3D getSessionAttribute(session, "password=
");
>            user =3D actualUser =3D=3D null ? null : String.valueOf(actu=
alUser);
>            password =3D actualPass =3D=3D null ? null :=20
> String.valueOf(actualPass);
>        }

>=20
> WDYT ?
>=20


--=20
Fr=E9d=E9ric Glorieux (AJLSM, http://ajlsm.com)