Hello to everyone, My company has been using XWiki for a while and we have always been able to solve all problems by ourselves. This time, it's a bug so weird we need some help from you. Unfortunately, it is also quite urgent. Let's begin with a short description of the problem: - We use the latest XWiki development release, 4.2-milestone-2. - We use Basic Authentication. - We connect with a particular administrator to a particular subwiki (it does not happen with other admiministrators or in other subwikis). - We open XWikiPreferences once, all is fine. - We open XWikiPreferences once again, we get a login prompt. - Any subsequent call to any page gets us a login prompt. As you may know, with Basic Authentication, a login prompt is an impossible situation unless the user has been deactivated/removed or the server does not receive the logged-in username. But we dumped the JVM heap, and we found that the user object is still there and the server receives the logged-in username. After a lot of debugging, we discovered that the user document object used to retrieve the user object has no references to its objects. In other words, xObjects is an empty collection within the used instance of XWikiDocument. If you would like to help us just read the whole JIRA issue, it contains much more information. And thank you very much! http://jira.xwiki.org/browse/XWIKI-8160 -- Martino Dell'Ambrogio Security Auditor Web: http://www.tillo.ch/ Email: tillo@tillo.ch