StrataFrame Forum
Home      Members   Calendar   Who's On
Welcome Guest ( Login | Register )
      



SecurityDialog at runtimeExpand / Collapse
Author
Message
Posted 12/05/2006 3:01:13 PM


StrataFrame User

StrataFrame UserStrataFrame UserStrataFrame UserStrataFrame UserStrataFrame UserStrataFrame UserStrataFrame UserStrataFrame User

Group: StrataFrame Users
Last Login: 07/09/2008 2:20:16 PM
Posts: 436, Visits: 944
After I use the SecurityDialog at run-time how do i refresh the current user's permissions? In case they were affected.
Post #4986
Posted 12/05/2006 3:27:52 PM


StrataFrame Developer

StrataFrame Developer

Group: StrataFrame Developers
Last Login: Yesterday @ 5:33:19 PM
Posts: 4,771, Visits: 4,735
Either log out and log back in or lock the screen (session locking) and re-enter the user and password.
Post #4990
Posted 12/05/2006 5:11:49 PM
StrataFrame VIP

StrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIP

Group: StrataFrame Users
Last Login: Yesterday @ 7:51:43 PM
Posts: 1,323, Visits: 3,446
This gets me thinking. What if an administrator is changing the permission on a role(s)? Wouldn't the application need to be locked, so all users have to relogin, to get the new permissions? Does strataframe have a way to lock the application, and notify any logged on users that they must log out (or log them out)?
Post #4995
Posted 12/05/2006 5:14:46 PM


StrataFrame Developer

StrataFrame Developer

Group: StrataFrame Developers
Last Login: Yesterday @ 5:33:19 PM
Posts: 4,771, Visits: 4,735
It works just like Windows...you will have to log out and log back in.  This is an industry standard and this is why we took this approach.
Post #4996
Posted 12/06/2006 2:39:15 PM
StrataFrame VIP

StrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIPStrataFrame VIP

Group: StrataFrame Users
Last Login: Yesterday @ 7:51:43 PM
Posts: 1,323, Visits: 3,446
Trent L. Taylor (12/05/2006)
It works just like Windows...you will have to log out and log back in. This is an industry standard and this is why we took this approach.


OK, I understand that if a user uses the security dialog to change some permissions, they will need to log out/in to see the changes (makes sense for dev/testing scenarios). I'm asking more about a production scenario, were the permissions of role are changed. In that case, any logged in users would also need to log out/in. E.g. If when userA, an admin goes in and messes with the permissions of some role(s), and say userB, userC and userD are all logged in when this is done, any one of which might be using the roles changed by userA.

Does SF have any way of forcing those (all) logged in user to get off? Or to notify them that need to log off?

I'm not sure I'd expect that it would, but SF is pretty massive, so before I go off and try to solve this, I'd just like to know if SF already has solved it! (though I'm pretty sure I'd just schedule some down time and kick SF out of the db, do the changes, let em back on)

Also, is there any way to schedule the changes? I.e. userA enters the changes during the day on monday, but can note that they wouldn't go into effect until that night at midnight. Again, not sure I'd expect SF to do this, just wondering if it does.
Post #5031
Posted 12/07/2006 8:58:24 AM


StrataFrame Developer

StrataFrame Developer

Group: StrataFrame Developers
Last Login: 10/21/2008 9:20:58 AM
Posts: 2,685, Visits: 1,887
No, there isn't any mechanism for SF to notify users that they need to log off.  There are a couple of reasons for this. 

1) First off, the reason that people have to log off and back on is because the security system builds a local list of the person's aggregate permissions when they login.  This way, the client does not have to run a SQL query every time SF asks the user if a certain permission is granted; they're cached on the local machine.

2) The notification mechanism would require that the user query the server to see if they need to log off, which would be a performance impact; or the security system would require an application server to send a message to the clients, which just isn't feasible.


www.bungie.net
Post #5046
« Prev Topic | Next Topic »


Reading This TopicExpand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: Ben Chase, Trent L. Taylor, Steve L. Taylor

PermissionsExpand / Collapse

All times are GMT -6:00, Time now is 12:12am

Powered by InstantForum.NET v4.1.4 © 2008
Execution: 0.109. 10 queries. Compression Enabled.
Site Map - Home - My Account - Forum - About Us - Contact Us - Try It - Buy It

Microsoft, Visual Studio, and the Visual Studio logo are trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries.