User see only Items of the Operational unit that is in your registration

Question

I have a vehicle management system. The company in which I work has several business units, so the user can only see the cars of the unit in which he works. This I managed to do, but whenever someone logs into the system it replaces the data of the current session with the session that was last entered. I created a Userstatic that made the user only see what is on its drive, but whenever someone enters it overwrites the data. I posted the code of my loginControl, because that’s where when a user enters it arrow to the userStatic a new user. If anyone knows a new way to do that.

 public String logar() {
    usuario = usuarioFacade.buscarUsuario(login, senha);
    if (usuario != null) {
        List<GrantedAuthority> roles = new ArrayList<>();
        roles.add(new GrantedAuthorityImpl(usuario.getPermissaoUsuario().toString()));
        UserStatic.setUsuario(usuario);
        SecurityContext context = SecurityContextHolder.getContext();
        context.setAuthentication(new UsernamePasswordAuthenticationToken(
                login, senha, roles));

Answer 1

Well, I think the problem is in your UserStatic. From one that I took from a reply of @utluiz:

Static attributes: Static attributes have the same value for all the instances of an object (within the same JVM, within a same Classloader).

Did you understand right? Basically all instances of your object will have the same value.

Back to the problem, in your Bean login you can create a variable to represent the logged in user, as follows:

private Usuario usuarioLogado; 

This one of yours Bean shall be marked as @SessionScoped. After you log in, just store the return of the buscarUsuario() in that usuarioLogado.

Done this you can recover this user in other Beans using the annotation ManagedProperty that allows injecting a Bean in the other, ex:

@ManagedProperty(value = "#{loginBean}")
private LoginBean loginBean;

Then to recover the logged in user just do:

//Pega os atributos do usuário Logado 
loginBean.getUsuarioLogado().getLogin();