Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0004327Openbravo ERPC. Securitypublic2008-07-04 15:272008-09-04 12:06
Reporterroklenardic 
Assigned Toalostale 
PriorityhighSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS20OS VersionUbuntu 8.04
Product Version2.40alpha-r3 
Target VersionFixed in Version2.40 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0004327: Session Timeout
DescriptionWithin the web.xml there is a setting
  <session-config>
    <session-timeout>60</session-timeout>
  </session-config>

which should set the authenticated session to expire after 60minutes.
I set that to 1 (yes, the one in WEB-INF context folder) to test if it does expire and could not get it to expire. no kind of inactivity expired the session.

Am I doing something wrong or is it a bug?
Steps To Reproduce
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to feature request 0004500 new dbaz Alert check time is hardcoded 
has duplicate defect 0004359 closed cromero session timeout 
related to defect 0007173 closed shuehner AJAX calls are not taken into account as "activity" into the application 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2008-07-04 15:27roklenardicNew Issue
2008-07-04 15:27roklenardicAssigned To => cromero
2008-07-04 15:27roklenardicsf_bug_id0 => 2010648
2008-07-07 09:52cromeroStatusnew => scheduled
2008-07-07 09:52cromeroAssigned Tocromero => alostale
2008-07-07 09:52cromerofix_in_branch => trunk
2008-07-09 17:22cromeroRelationship addedhas duplicate 0004359
2008-07-22 18:36pjuvaraSeverityminor => major
2008-07-22 18:36pjuvarafix_in_branchtrunk =>
2008-07-22 18:42pjuvaraPrioritynormal => high
2008-07-23 22:37cromeroNote Added: 0008396
2008-07-24 10:23alostaleRelationship addedrelated to 0004500
2008-07-24 10:25alostaleNote Added: 0008399
2008-07-29 16:39svnbotCheckin
2008-07-29 16:39svnbotNote Added: 0008424
2008-07-29 16:39svnbotStatusscheduled => resolved
2008-07-29 16:39svnbotResolutionopen => fixed
2008-07-29 16:39svnbotsvn_revision => 6029
2008-08-25 18:46svnbotCheckin
2008-08-25 18:46svnbotNote Added: 0008735
2008-08-25 18:46svnbotsvn_revision6029 => 6546
2008-08-25 18:48svnbotCheckin
2008-08-25 18:48svnbotNote Added: 0008736
2008-08-25 18:48svnbotsvn_revision6546 => 6547
2008-08-29 10:59svnbotCheckin
2008-08-29 10:59svnbotNote Added: 0008779
2008-08-29 10:59svnbotsvn_revision6547 => 6647
2008-09-04 12:06psarobeRegression testing => No
2008-09-04 12:06psarobeStatusresolved => closed
2008-09-04 12:06psarobeFixed in Version => 2.40
2009-01-27 22:17dbazRelationship addedrelated to 0007173

Notes
(0008396)
cromero   
2008-07-23 22:37   
The problem is due alerts are throwing each 50 seconds a consult to db in order to update if there are new alerts.

Modifying the alert update time (now it is hardcoded in the menu.html file) to a value bigger than session timeout time, the timeout time will be effective.
(0008399)
alostale   
2008-07-24 10:25   
Once defect 0004500 is fixed, this bug would have an easy workarround (the one mentioned by cromero).

Anyway the solution for this one should make the alert checks not to reset the session timer.
(0008424)
svnbot   
2008-07-29 16:39   
Repository: openbravo
Revision: 6029
Author: gorka_gil
Date: 2008-07-29 16:39:03 +0200 (Tue, 29 Jul 2008)

Fixed issue 4327 Now, alerts don't reset the session timeout

---
A branches/sessiontimeout/src-core/src/org/openbravo/utils/SessionExpirationFilter.java
U branches/sessiontimeout/src-wad/src/org/openbravo/wad/web.xml
---

https://dev.openbravo.com/websvn/openbravo/?rev=6029&sc=1 [^]
(0008735)
svnbot   
2008-08-25 18:46   
Repository: openbravo
Revision: 6546
Author: gorka_gil
Date: 2008-08-25 18:46:40 +0200 (Mon, 25 Aug 2008)

[r2.40] Related to issue 4327 fix session timeout in branch r2.40

---
U branches/r2.40/src-wad/src/org/openbravo/wad/web.xml
---

https://dev.openbravo.com/websvn/openbravo/?rev=6546&sc=1 [^]
(0008736)
svnbot   
2008-08-25 18:48   
Repository: openbravo
Revision: 6547
Author: gorka_gil
Date: 2008-08-25 18:48:00 +0200 (Mon, 25 Aug 2008)

[r2.40] Related to issue 4327 fix session timeout in branch r2.40

---
A branches/r2.40/src-core/src/org/openbravo/utils/SessionExpirationFilter.java
---

https://dev.openbravo.com/websvn/openbravo/?rev=6547&sc=1 [^]
(0008779)
svnbot   
2008-08-29 10:59   
Repository: openbravo
Revision: 6647
Author: gorka_gil
Date: 2008-08-29 10:59:37 +0200 (Fri, 29 Aug 2008)

Fixed bug 4327 fix session timeout

---
A trunk/src-core/src/org/openbravo/utils/SessionExpirationFilter.java
U trunk/src-wad/src/org/openbravo/wad/web.xml
---

https://dev.openbravo.com/websvn/openbravo/?rev=6647&sc=1 [^]