Uploaded image for project: 'Blesta Core'
  1. Blesta Core
  2. CORE-1512

Allow only one active session per staff user

        Details

        • Type: Improvement
        • Status: Open
        • Priority: Major
        • Resolution: Unresolved
        • Affects Version/s: 3.3.2
        • Fix Version/s: Short Term
        • Component/s: Staff Interface
        • Labels:
          None

          Description

          Add a setting to Staff Group settings that, if enabled, will destroy all open sessions for a user if that user authenticates again with a different session.

          For example, if a user logs in with browser A, then logs in with browser B, the session in browser A would be destroyed upon login with browser B. In other words, only one active session is allowed per user.

            Activity

            Ascending order - Click to sort in descending order
            cody Cody Phillips (Inactive) created issue -
            cody Cody Phillips (Inactive) made changes -
            Field Original Value New Value
            Link This issue relates to CORE-1430 [ CORE-1430 ]
            admin Paul Phillips made changes -
            Fix Version/s Short Term [ 10800 ]
            admin Paul Phillips made changes -
            Assignee Cody Phillips [ cody ]
            tyson Tyson Phillips (Inactive) made changes -
            Rank Ranked higher
            tyson Tyson Phillips (Inactive) made changes -
            Story Points 3
            tyson Tyson Phillips (Inactive) made changes -
            Sprint 4.9.0 Sprint 2 [ 99 ]
            tyson Tyson Phillips (Inactive) made changes -
            Rank Ranked higher
            tyson Tyson Phillips (Inactive) made changes -
            Fix Version/s 4.9.0-b1 [ 11301 ]
            Fix Version/s Short Term [ 10800 ]
            tyson Tyson Phillips (Inactive) made changes -
            Assignee Tyson Phillips [ tyson ]
            Automated transition triggered when Tyson Phillips (Inactive) created a branch in Stash -
            Status Open [ 1 ] In Progress [ 3 ]
            tyson Tyson Phillips (Inactive) made changes -
            Remaining Estimate 0 minutes [ 0 ]
            Time Spent 49 minutes [ 2940 ]
            Worklog Id 13022 [ 13022 ]
            tyson Tyson Phillips (Inactive) made changes -
            Sprint 4.9.0 Sprint 2 [ 99 ] 4.9.0 Sprint 2, 4.9.0 Sprint 3 [ 99, 101 ]
            tyson Tyson Phillips (Inactive) made changes -
            Rank Ranked higher
            Hide
            Permalink
            tyson Tyson Phillips (Inactive) added a comment -

            We probably need to update the session handler for this (PDOHandler) and use a token to reference a single user across all sessions to find them easily, then update their expire date to be in the past so the sessions are expired.

            One potential issue is the SessionHandlerInterface that is being used does not provide a way to fetch any other session user's info, so we would need a way to do that. TBD

            Show
            tyson Tyson Phillips (Inactive) added a comment - We probably need to update the session handler for this (PDOHandler) and use a token to reference a single user across all sessions to find them easily, then update their expire date to be in the past so the sessions are expired. One potential issue is the SessionHandlerInterface that is being used does not provide a way to fetch any other session user's info, so we would need a way to do that. TBD
            tyson Tyson Phillips (Inactive) made changes -
            Sprint 4.9.0 Sprint 2, 4.9.0 Sprint 3 [ 99, 101 ] 4.9.0 Sprint 2 [ 99 ]
            tyson Tyson Phillips (Inactive) made changes -
            Rank Ranked lower
            tyson Tyson Phillips (Inactive) made changes -
            Time Spent 49 minutes [ 2940 ] 2 hours, 11 minutes [ 7860 ]
            Worklog Id 13157 [ 13157 ]
            tyson Tyson Phillips (Inactive) made changes -
            Fix Version/s Short Term [ 10800 ]
            tyson Tyson Phillips (Inactive) made changes -
            Fix Version/s 4.9.0-b1 [ 11301 ]
            tyson Tyson Phillips (Inactive) made changes -
            Status In Progress [ 3 ] Open [ 1 ]

              People

              • Assignee:
                tyson Tyson Phillips (Inactive)
                Reporter:
                cody Cody Phillips (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 hours, 11 minutes
                  2h 11m

                    Agile