EP6 iView problem - User able to view other people's data

Question

System Details:
EP6: SP7 Patch2
WebAS: 640 SP8
OS: HP-UX 1111
DB: Oracle 9.2.0.5
JDK: 1.4.2_05
While testing with multiple users, previous user's data has been retained across separate user sessions and on different machines.  For example, 'User 1' would view their pay data then log off.  On the same computer, 'User 2' would then login and be able to view 'User 1s' data. This error happens frequently (like 10% of attempts), however not reliably (ie we do not know what triggers the error).  It uses the SAP Connectivity Framework to connect the Portal to a 46C backend.
Does anyone have any experience with this?
Cheers,
Vic

Answer 1

Hi Victor,
here is how it worked out for me.
private void ensureBeanIsSetup() {
     IPortalComponentRequest request = (IPortalComponentRequest) this.getRequest();
     IPortalComponentSession session = request.getComponentSession();
     IPortalComponentContext context = request.getComponentContext();
     IPortalComponentProfile profile = context.getProfile();
     // reset any bean value just to make sure.
     myBean = null;
     //             explicitly test if we got the right class. This is
     //             chiefly for development purposes. If you update
     //             a par while keeping a session open you might get
     //             a ClassCastException if you don't do this.
     Object o = session.getValue(BEAN_KEY);
     if (o instanceof MyBean) {
          myBean = (MyBean) o;
     if (myBean == null) {
          //             no bean or probably wrong class.
          //             We simply instantiate a new bean and put
          //             it into the session
          myBean = new MyBean(resBundle);
          myBean.setJspOutput(START_STATE);
          // new bean was instantiated (reload all values!)
          session.putValue(BEAN_KEY, myBean);
´
Call the ensureBeanIsSetup() in doInitialization() and in doProcessAfterInput().
Use session as scope in your JSPs. Of course you need to change the bean names to fit your code.
Hope this helps.
Kind regards
Francisco
Message was edited by: Francisco Villar