Uploaded image for project: 'Blesta Core'
  1. Blesta Core
  2. CORE-1512

Allow only one active session per staff user

        Details

        • Type: Improvement
        • Status: Open
        • Priority: Major
        • Resolution: Unresolved
        • Affects Version/s: 3.3.2
        • Fix Version/s: Short Term
        • Component/s: Staff Interface
        • Labels:
          None

          Description

          Add a setting to Staff Group settings that, if enabled, will destroy all open sessions for a user if that user authenticates again with a different session.

          For example, if a user logs in with browser A, then logs in with browser B, the session in browser A would be destroyed upon login with browser B. In other words, only one active session is allowed per user.

            Activity

            Hide
            Permalink
            tyson Tyson Phillips (Inactive) added a comment -

            We probably need to update the session handler for this (PDOHandler) and use a token to reference a single user across all sessions to find them easily, then update their expire date to be in the past so the sessions are expired.

            One potential issue is the SessionHandlerInterface that is being used does not provide a way to fetch any other session user's info, so we would need a way to do that. TBD

            Show
            tyson Tyson Phillips (Inactive) added a comment - We probably need to update the session handler for this (PDOHandler) and use a token to reference a single user across all sessions to find them easily, then update their expire date to be in the past so the sessions are expired. One potential issue is the SessionHandlerInterface that is being used does not provide a way to fetch any other session user's info, so we would need a way to do that. TBD

              People

              • Assignee:
                tyson Tyson Phillips (Inactive)
                Reporter:
                cody Cody Phillips (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 hours, 11 minutes
                  2h 11m

                    Agile