X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=server%2Fruntime%2Forg.argeo.server.jackrabbit%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fjackrabbit%2Fremote%2FScopedSessionProvider.java;h=ffe6df9b1c1dfb853dd385d30eee5b83f4571c16;hb=0b2d4747191bd907c8911d058263fa962cef6a6c;hp=e321bfac3b5994c7a4c02dca2ac705697f604380;hpb=1349f13dd9a034fe6fd7ab2f0ba520204138af0a;p=lgpl%2Fargeo-commons.git diff --git a/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java b/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java index e321bfac3..ffe6df9b1 100644 --- a/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java +++ b/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java @@ -1,5 +1,5 @@ /* - * Copyright (C) 2007-2012 Mathieu Baudier + * Copyright (C) 2007-2012 Argeo GmbH * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -109,10 +109,12 @@ public class ScopedSessionProvider implements SessionProvider, Serializable { if (jcrSession == null) try { Session session = login(rep, workspace); - if (!session.getUserID().equals(springUser)) + if (!session.getUserID().equals(springUser)) { + JcrUtils.logoutQuietly(session); throw new ArgeoException("Spring Security user '" + springUser + "' not in line with JCR user '" + session.getUserID() + "'"); + } currentRepositoryName = requestJcrRepository; // do not use workspace variable which may be null currentWorkspaceName = session.getWorkspace().getName();