ERAttachmentLink and sessions

Hi All

We question regarding ERAttachmentLink, following the code through it
seems that it doesn't preserve the session when it creates the links.
The reason this is important is that using a custom handler to check
that our currently logged in user can access the given attachment we
lose all visibility of who is actually logged in.

If the app is using cookies for its sessions all is fine as the
session is retrieved from the cookie, but if the session is in the url
then it all breaks down. I can obviously tweak ERAttachmentLink to
preserve the session if needed but before i started i wanted to know
if there is any reason why it was done in this way.

Many Thanks

Robin

-- 

------------------------------
Click Travel Ltd
Taking business travel and expenses one step further
http://www.clicktravel.com

Winner of "Best Business Travel Management Company" at the Business Travel 
Awards (2012 & 2009) and the Travel Trade Gazette Awards (2011). We're also ranked 
22nd in the 2012 Sunday Times Hiscox Tech Track 100.

For all the latest Click news please visit our blog: 
http://clicktravel.com/blog

Think: Do you really need to print this email?

------------------------------------------------------------------------------
Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery
and much more. Keep your Java skills current with LearnJavaNow -
200+ hours of step-by-step video tutorials by Java experts.
SALE $49.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122612