From r_silva at cantv.net  Fri Nov  6 11:16:33 2009
From: r_silva at cantv.net (Reinaldo Silva)
Date: Fri, 06 Nov 2009 11:46:33 -0430
Subject: [Rails-portlet-bugs] Capturing User Info
Message-ID: <op.u2zd5vszzh2rfj@localhost.localdomain>


Hi,

I'm concerned about the security issues that arise in relaying over UID  
HTTP GET parameter to establish current logged user identity. Is there  
another suggested way to retrieve this info from Liferay through  
caterpillar? Could be the UID "injected" in the Rails session whenever is  
available? Any suggestion?

Thanks in advance,

-- 
Reinaldo Silva
E-mail: r_silva at cantv.net