j_security_check and the generated LoginContext

[motte1979]

Is there a way to retrieve the LoginContext in an EJB ?
I'd like to make it possible that the user can change his user-login-name. But always a user did such a change the UserPrinciple-Information holds the old name. I need to replace the SimplePrinciple with the user-login-name by the new one. How can i do this ?

Thanks in advance ..
Matthias

[motte1979]

I investigated that i need all users currently logged in (because somebody else can change the username in the application for a currently logged in user.)
This is somewhat stupid, but these are the requirements.

Any ideas ?

[ragavgomatam]

You cannot change the SimplePrincipal. You set the name in the Principal via a constructor during login. Also It has only a getName() method. So answer is it
is a big security loophole if you are allowed to change the SimplePrincipal name. So not possible