User 'null' does not have permission error when accessing secured JIRA issue after session expires

Here is the stack trace posted by a customer when this happened to him while closing an issue on the support site recently:

Should JIRA redirect to a login page?

======================================

System Error
A system error has occurred.

If this problem persists - please notify your JIRA administrator of this problem.

If you are an administrator, please try submitting this problem via the Support Request Page.

Else, please create a support issue on our support system at http://support.atlassian.com with the following information:

a description of your problem
cut & paste the error and system information found below
attach the application server log file

Cause:
com.atlassian.jira.exception.IssuePermissionException: User 'null' does not have permission to see issue 'CSP-1203'

Stack Trace: [hide]

com.atlassian.jira.exception.IssuePermissionException: User 'null' does not have permission to see issue 'CSP-1203' at com.atlassian.jira.web.action.issue.AbstractIssueSelectAction.getIssue(AbstractIssueSelectAction.java:72) at com.atlassian.jira.web.action.workflow.WorkflowUIDispatcher.doExecute(WorkflowUIDispatcher.java:39) at webwork.action.ActionSupport.execute(ActionSupport.java:153) at com.atlassian.jira.action.JiraActionSupport.execute(JiraActionSupport.java:46) at webwork.dispatcher.GenericDispatcher.executeAction(GenericDispatcher.java:131) at com.atlassian.jira.web.dispatcher.JiraServletDispatcher.service(JiraServletDispatcher.java:186) at javax.servlet.http.HttpServlet.service(HttpServlet.java:336) at com.evermind[Orion/2.0.2 (build 11157)]._hb.doFilter(.:59) at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:142) at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:58) at com.atlassian.jira.web.filters.SitemeshExcludePathFilter.doFilter(SitemeshExcludePathFilter.java:38) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:16) at com.atlassian.seraph.filter.SecurityFilter.doFilter(SecurityFilter.java:168) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.seraph.filter.LoginFilter.doFilter(LoginFilter.java:177) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.util.profiling.filters.ProfilingFilter.doFilter(ProfilingFilter.java:132) at com.atlassian.jira.web.filters.ProfilingAndErrorFilter.doFilter(ProfilingAndErrorFilter.java:25) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.jira.web.filters.ActionCleanupDelayFilter.doFilter(ActionCleanupDelayFilter.java:37) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.johnson.filters.JohnsonFilter.doFilter(JohnsonFilter.java:91) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.jira.web.filters.gzip.GzipFilter.doFilter(GzipFilter.java:72) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.core.filters.AbstractEncodingFilter.doFilter(AbstractEncodingFilter.java:36) at com.evermind[Orion/2.0.2 (build 11157)]._cub._pod(.:383) at com.evermind[Orion/2.0.2 (build 11157)]._cub._bmc(.:177) at com.evermind[Orion/2.0.2 (build 11157)]._ax._ltc(.:666) at com.evermind[Orion/2.0.2 (build 11157)]._ax._uab(.:191) at com.evermind[Orion/2.0.2 (build 11157)]._bf.run(.:62)
Referer URL: http://support.atlassian.com/browse/CSP-1203

Build Information:
Uptime: 1 day, 8 hours, 14 minutes, 15 seconds
Edition: Enterprise
Version: 3.2.2
Build Number: 90

Server Information:
Application Server: Orion/2.0.2
Servlet Version: 2.2

Memory Information:
Total Memory: 160 MB
Free Memory: 16 MB
Used Memory: 144 MB

System Information:
System Date: Tuesday, 12 Jul 2005
System Time: 06:55:10
Java Version: 1.4.2_04
Java Vendor: Sun Microsystems Inc.
JVM Version: 1.0
JVM Vendor: Sun Microsystems Inc.
JVM Implementation Version: 1.4.2_04-b05
Java Runtime: Java(TM) 2 Runtime Environment, Standard Edition
Java VM: Java HotSpot(TM) Server VM
User Name: j2ee
User Timezone: America/Chicago
User Locale: English (United States)
System Encoding: UTF-8
Operating System: Linux 2.4.21-32.0.1.ELsmp
OS Architecture: i386
Application Server Container: Orion/2.0.2
Database type: postgres
Database JNDI address: jdbc/JiraDS

Request Information:
Request URL: http://atlassian01.contegix.com:10080/500page.jsp

• Scheme: http
• Server: atlassian01.contegix.com
• Port: 10080
• URI: /500page.jsp
• - Context Path:
• - Servlet Path: /500page.jsp
• - Path Info: null
• - Query String: id=13574&action=41
  Request Attributes:
• javax.servlet.error.message :

com.atlassian.jira.exception.IssuePermissionException: User 'null' does not have permission to see issue 'CSP-1203' at com.atlassian.jira.web.action.issue.AbstractIssueSelectAction.getIssue(AbstractIssueSelectAction.java:72) at com.atlassian.jira.web.action.workflow.WorkflowUIDispatcher.doExecute(WorkflowUIDispatcher.java:39) at webwork.action.ActionSupport.execute(ActionSupport.java:153) at com.atlassian.jira.action.JiraActionSupport.execute(JiraActionSupport.java:46) at webwork.dispatcher.GenericDispatcher.executeAction(GenericDispatcher.java:131) at com.atlassian.jira.web.dispatcher.JiraServletDispatcher.service(JiraServletDispatcher.java:186) at javax.servlet.http.HttpServlet.service(HttpServlet.java:336) at com.evermind[Orion/2.0.2 (build 11157)]._hb.doFilter(.:59) at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:142) at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:58) at com.atlassian.jira.web.filters.SitemeshExcludePathFilter.doFilter(SitemeshExcludePathFilter.java:38) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:16) at com.atlassian.seraph.filter.SecurityFilter.doFilter(SecurityFilter.java:168) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.seraph.filter.LoginFilter.doFilter(LoginFilter.java:177) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.util.profiling.filters.ProfilingFilter.doFilter(ProfilingFilter.java:132) at com.atlassian.jira.web.filters.ProfilingAndErrorFilter.doFilter(ProfilingAndErrorFilter.java:25) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.jira.web.filters.ActionCleanupDelayFilter.doFilter(ActionCleanupDelayFilter.java:37) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.johnson.filters.JohnsonFilter.doFilter(JohnsonFilter.java:91) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.jira.web.filters.gzip.GzipFilter.doFilter(GzipFilter.java:72) at com.evermind[Orion/2.0.2 (build 11157)]._ha.doFilter(.:20) at com.atlassian.core.filters.AbstractEncodingFilter.doFilter(AbstractEncodingFilter.java:36) at com.evermind[Orion/2.0.2 (build 11157)]._cub._pod(.:383) at com.evermind[Orion/2.0.2 (build 11157)]._cub._bmc(.:177) at com.evermind[Orion/2.0.2 (build 11157)]._ax._ltc(.:666) at com.evermind[Orion/2.0.2 (build 11157)]._ax._uab(.:191) at com.evermind[Orion/2.0.2 (build 11157)]._bf.run(.:62)

• os_securityfilter_already_filtered : true
• com.atlassian.johnson.filters.JohnsonFilter_already_filtered : true
• com.atlassian.jira.web.filters.ActionCleanupDelayFilter : true
• javax.servlet.error.request_uri : /secure/WorkflowUIDispatcher.jspa
• javax.servlet.error.status_code : 500
• jira.webwork.cleanup : false
• os_authstatus : null
• _sitemesh_filterapplied : true
• javax.servlet.error.servlet_name : action
• com.atlassian.jira.web.filters.gzip.GzipFilter_already_filtered : true
• loginfilter.already.filtered : true
• atlassian.core.seraph.original.url : /secure/WorkflowUIDispatcher.jspa?id=13574&action=41
• webwork.result : Value stack =========== ===========

Request Logging:
0 log statements generated by this request: