Using a DistributedListImpl for the list of sessions
involves some security issues. The distributed list does not
know about the permissions for users.
There probably has to be a SecureDistributedListImpl, that
is constructed with a permission manager as parameter, that
decides who is allowed to register a listener. Otherwise
there might be serious security problems.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Logged In: YES
user_id=52085
Using a DistributedListImpl for the list of sessions
involves some security issues. The distributed list does not
know about the permissions for users.
There probably has to be a SecureDistributedListImpl, that
is constructed with a permission manager as parameter, that
decides who is allowed to register a listener. Otherwise
there might be serious security problems.