How to programmatically update the roles in UserPrincipal?

Question

Hi all,
I am having a problem with form based authentication. I use tomcat.
I want to show or hide content on my site based on the roles that the user belongs. In fact, I have already done this with isUserInRole(aRole) in the servlet side and with pageContext.request.userPrincipal.roles in the jsp side.
The problem starts when I give the user the choice to add their selfs in a new role. i.e. a user decides to be an admin as well. I would like the site respond immediatelly to the user' s new role. That would mean that right after the user clicks the link that makes him/her an administrator, all the administrative links would be available without him having to logout and back in. But that just doesn' t happen.
It seems like the UserPrincipal in the request is never updated and it is always the exact same UserPrincipal that was fetched during the j_security_check. Hence, the administrative links are available only if the user logs out and makes a new login request, thus making a new j_security_check and fetching a fresh UserPrincipal in the request.
Is there a way to update this UserPrincipal with the new role(s) added during a session?
Is there anything else I could do?
I have been scanning the entire web for 3 days and found nothing :-(
HeLp !

Answer 1

Youcannot assign a canvas at runtime. Yu have to specify int at designtime and it cannot be changed at runtime. if you need an item in more than one canvas, use a mirror-item (duplcate the item and set the property Synchronize with)