Bookmark a page specific to a User (for example: http://localhost:8080/Addresses.do?uid=2266493) and let your session timeout. Then hit the URL again and you get: [ServletException in:/WEB-INF/pages/addresses.jsp] IllegalInvocationException calling aclOrgEntitlement ("org_entitlement(rhn_monitor)"): null'
The culprit is in the NavMenuTag.java file. If the request attribute "session" is null, we set the user to null. Then we proceed to call the AclGuard with a null user. Bad idea.
Reassigning to jesusr
Fixed in Access.java. Rather than fix the tag, I fixed the acl. It should return false if it can't access the user.