...
In XperienCentral there are actually three different sessions that play a role in Session Management:
| Session Interface | Description |
|---|---|
| XperienCentral specific session. Acts as a wrapper of XperienCentral specific context information and the JCR and HTTP sessions. |
| JCR session, needed to read and write from and to the JCR. |
| Website visitor session (see Java API documentation) |
Session Management is handled by the Session Manager service which only provides getters and instantiate methods for the first session type; the nl.gx.webmanager.foundation.Session. Because this is a wrapper around the other two sessions, you always have access to all three sessions if you have access to this session. The major purpose of the session is to define authorization. Authorization depends on the roles associated with the user stored in the session.
...