BOE Session question

[gillrowley]

Running BOE XI R2 embedded in a Java (Struts) website for external reporting. Single sign-on. Sometimes a person will log into InfoView (again, with single sign-on, so they are not actually typing a username and password) and a different person's reports will come up. Obviously this is a confidentiality issue. We're wondering if somehow a session is staying active because the previous person is closing the browser rather than logging out. Any one else ever experience this? I can't duplicate this internally. Thanks.

-Gill

 

[hilfy]

This shouldn't be an issue on the BO side with Infoview. However, I have seen this type of thing come up in two types of situations:

1. Same workstation, one user closes without logging off and the next user opens infoview. The cookie that contains the session info is still active so the login for the first user didn't get cleared.

2. When session info is stored on the server side, the first user doesn't log off. Like situation 1, the session info is kept and the server gets "confused" about which user's session should be used.

-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.