where are portal session vars set?

[skyrack_technology]

Hi -
I've been trying to debug, and fix (hopefully) a problem with KB articles in customer portal apparently not being properly selected according to contacts/sites contracts.

This relies on the contract_software() funtcion as far as I can see, and this has $_SESSION['contracts'] in its WHERE clause.

Contract id's for some queries (as $contractid) look like they are grabbed from the contacts entitlement, but the array of contracts (from the contacts site) as set in the session variable $_SESSION['contracts'] is set somewhere else I guess?

I have a test user with only one contract for whom $_SESSION['contracts'] is an empty array.
On the other hand, i have another test user with 5 contracts for whom $_SESSION['contracts'] is properly populated.

Can somebody point me in the right direction for debugging this further? I cannot find anywhere in the included lib and function files anything to set this (any) session variables.

Cheers
Gavin