posted 20 years ago
Why not limit a specific user to one session? In other words, you can use a cookie, or some other logic to identify users, and if the user already has an open session, deny them access to a second session. We've done this for an application that requires the users to login. Once they login, their session is logged, and if the same user attempts to login again (from any machine), they are denied. Of course, we use a database to track users, but you can do it with a Bean in application scope.
for (int i = today; i < endOfTime; i++) { code(); }