getCallerPrincipal().getName() is always set to last user wh

[brianz]

We are using SessionContext/EntityContext to get the user name for updating the db. The problem is the last user who logged in is always set for all others in a multi-user environment. Pojos were written in order to isolate the issue, but the problem did not occur. Any suggestions?

[starksm64]

I don't understand what your asking with regard to getCallerPrincipal(). This is the identity of the caller on the current invocation. In a multi-user environment it can change on every call. What is the relationship between the caller of an ejb and the db?

[bachue]

You must use a filter to register authentication in each user thread
look at this:
http://www.luminis.nl/publications/websecurity.html