Red Hat Bugzilla – Bug 857438
Create a way to let GUI session timeout be configurable
Last modified: 2015-03-18 13:55:43 EDT
There are a lot of customers (at least here, in Brazil) that use JON in a NOC environment. For these environments, they need to keep some JON Dashboard all day logged in, and displayed in some big screen. However, the user session timeout on JON does not allow the wish "all day logged in". Nowadays we have to log in every time the timeout happens.
It would be great if we could configure the session timeout. Maybe, after a user login in the GUI, we could choose in a checkbox if we want to keep the session without timeout, maybe using a keepalive control with the server.
By the way, I have just talked with Mike Thompson about that new feature.
Thanks in advance !
There are 3 possible ways to go:
1) To provide the same behavior for all RHQ nodes withing the RHQ cluster. I.e. to have a possibility to change the value of the session timeout in the system settings.
2) To have the same session timeout for one RHQ server. The value would be stored in the rhq-server.properties file => no UI change
3) And the finest graded - to allow each user to set its own value and store it in the user's prefs. This would require a new UI for editing it. Perhaps some parts of test page could be reused.
Also there are two ways of implementing the change propagation. In other words, what happens if someone changes the value. Should the change be considered after next login (a) or immediately (b)?
I've made a prototype using the "1a" approach (using sys. settings and change happens after next login).
The default value and at the same time the smallest possible value is 1 hour and it is unbounded (if an extra large value is typed in, it is set to 24 days (this is what Integer.MAX_VALUE of milliseconds is))
The another story is the testability. Most of the logic is in the UserSessionManager (coregui), so it is not testable by our integration tests. What can be used is the sahi.
Since the minimal value is 1 hour, it is a bad idea to wait 1 hour and sahi has no means to fake the value in the db to be some lover value(in the db, the duration is stored as milliseconds). Perhaps the GWT Arquillian extension  could be used for this purpose. Simple GWT unit tests won't work because we need a little bit of contextual information there.
I was manually testing it also for JSF charts
Author: Jay Shaughnessy <email@example.com>
Date: Wed Apr 10 16:51:51 2013 -0400
Add a dbupgrade step for this. schema now at 2.132. Also, add a little
more protection when setting the session timeout.
As this is MODIFIED or ON_QA, setting milestone to ER1.
As this is MODIFIED or ON_QA, setting milestone to ER01.
*** Bug 535380 has been marked as a duplicate of this bug. ***
*** Bug 1070248 has been marked as a duplicate of this bug. ***