Description: ------------ i believe the success condition for this function is quite lax. it's possible that the 'auth' session variable may be set, perhaps to an integer where an array is expected, and qualify for success. also, success is in no way determined by the 'perm' session variable. in the style of other methods, such as the get-containers, success doesn't have to depend on whether the containers instantiate correctly, but it should validate the data passed for that istantiation. so, consider the following checks for a failure case: 1. is 'auth' session variable an array 2. is 'auth_name' session variable set and a valid name (non-empty perhaps) 3. is 'perm' session variable an array arnaud lightly addressed this issue in the mailing list, and pointed out that the auth/perm objects would not be arrays; however, i was referring to the frozen session variables, which are arrays. i think the success of unfreezing should concern itself with the validity of those frozen arrays that it uses to construct the objects.

I agree that we could add a few more sanity checks