[pmwiki-users] Login and multiple windows open

Ben Wilson dausha at gmail.com
Thu Jun 15 16:40:04 CDT 2006


On 6/15/06, Patrick R. Michaud <pmichaud at pobox.com> wrote:
> On Wed, Jun 14, 2006 at 09:21:08AM +0200, OBUTEX / Hladůvka wrote:
> > Hi,
> > I was loggedin as Admin and had open 2 pages where only Admin has Read
> > access.
> > In one of the pages I logged in as an other user. This user could read
> > the Admins pages while Admin's first page was open  .
> > Is there any trick  how to disable  login  a user  until  other  user is
> > logged in or automaticly logout the previous user?
>
> Browsers don't normally keep track of each window separately --
> they're all seen as the same application and session.  Thus, logging
> in as an administrator in one window has the effect of giving administrator
> privileges to all windows.
>
> I think there's a way in PmWiki to have logging in as a new identity
> force a logout of any previous identities, but I can't remember what
> it is right now.  :-(

The only way I have done anything close is to track sessions. That is,
if you were logged in on one computer and then logged in on another it
would explicitly destroy the first session. It was meant as a security
measure (if you suddenly lost your session because you logged on at a
different system but _you_ did not, then you would at least be alerted
to the problem). However, this is still not at the per-window level. I
am not aware of that having a solution.


More information about the pmwiki-users mailing list