An apparatus and method provide persistent data during a user session on a
networked computer system. A global data cache is divided into three
sections: trusted, protected, and unprotected. An authorization mechanism
stores and retrieves authorization data from the trusted section of the
global data store. A common session manager stores and retrieves data
from the protected and unprotected sections of the global data cache.
Using the authorization mechanism, software applications may verify that
a user is authorized without prompting the user for authorization
information. Using the common session manager, software applications may
store and retrieve data to and from the global data store, allowing the
sharing of data during a user session. After the user session terminates,
the data in the global data cache corresponding to the user session is
invalidated.