Hi Charles.
I cannot reproduce the fact that a new user will log in and the session will be still running under the old user credentials after that. Whenever a different user logs in after a Session Lock, this user will be the current user from then on. If the old user left a form open which the new user has no permission to see it, right after the new login that form will automatically receive a panel to cover all its controls and the new logged in user won't have access to it.
Now, if you, for example, like I do in my application, have menu items that should be Enabled/Disabled depending on the current user permissions, you will have to refresh those statuses by yourself. In my situation, I have added a handler for the AfterSessionLock into my MainForm, like this:
'-- Add handler to refresh Menus after Session Lock
AddHandler MicroFour.StrataFrame.Security.SessionLock.AfterSessionLock, AddressOf HandleAfterSessionLock
This way, I can then add any code needed to refresh the new situation:
Public Sub HandleAfterSessionLock(ByVal sender As Object, ByVal e As EventArgs)
'-- add code to deal with new user logged in