Proposal: Supporting multiple callers in process

Hi Stef, This is indeed an annoying part in the specs, which probably all of us have suffered from...
I would suggest to go for your first approach with one additional constrain - not allowing to explicitly longing on from a SO RO session, which is meaningless.
i.e. the specs will allow creating a RO session even if another RW session is logged in as SO, but not allow to login form that RO session.
Then, return as you said CKS_RO_PUBLIC_SESSION for the RO session.
This will solve the practical problem.
Of course, a clarification note would have to be added to the specs ;) Cheers, Gil.