Bug 767907 - No session timeout when admin logs into webadmin
Summary: No session timeout when admin logs into webadmin
Keywords:
Status: CLOSED DUPLICATE of bug 758999
Alias: None
Product: oVirt
Classification: Retired
Component: ovirt-engine-webadmin
Version: unspecified
Hardware: All
OS: Linux
unspecified
high
Target Milestone: ---
: ---
Assignee: Einav Cohen
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-12-15 08:24 UTC by Tomas Dosek
Modified: 2016-01-28 21:53 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-12-15 09:08:48 UTC
oVirt Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Tomas Dosek 2011-12-15 08:24:51 UTC 
Description of problem:
When admin user logs into webadmin portal there's no session timeout that would log him out of the system after some time. This could be a possible security issue.

(note that I logged into webadmin 2 days ago and the session is still active and I'm able to perform any task)

Version-Release number of selected component (if applicable):
found on RHEV webadmin (rhevm-webadmin-portal-3.0.0_0001-60.el6.x86_64)

How reproducible:
100%

Steps to Reproduce:
1.Login to webadmin
2.Wait for instance 1 day

  
Actual results:
Session is not automatically destroyed, user is  logged in and may perform various tasks

Expected results:
Session should be restored to login screen after let's say 30 minutes of user's inactivity.
Comment 1 Einav Cohen 2011-12-15 09:08:48 UTC 

*** This bug has been marked as a duplicate of bug 758999 ***
Note You need to log in before you can comment on or make changes to this bug.