Question about cookies returned during markup operations

[Nathan Lipke <nathan.lipke@oracle.com>]

When a producer sets cookies (in the HTTP Response headers) outside of an initCookie() call there is no guidance in the spec as to if and how these cookies should be returned to other portlets on the same producer. This should be specified.

My interpretation is:
It depends on the value of the CookieProtocol in the service description as follows:

• none - each portlet has its own cookies
• perUser - all portlets on a given producer share cookies
• perGroup - all portlets in a group share cookies.

Does this seem right? If so should it be added to errata?

Thanks,

Nate