-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73619/
-----------------------------------------------------------
Review request for ranger, Dhaval Shah, Dineshkumar Yadav, Jayendra Parab,
Kishor Gollapalliwar, Abhay Kulkarni, Mehul Parikh, Pradeep Agrawal, Ramesh
Mani, Sailaja Polavarapu, and Velmurugan Periasamy.
Bugs: RANGER-3457
https://issues.apache.org/jira/browse/RANGER-3457
Repository: ranger
Description
-------
1)
*Steps:*
1. Configured ranger.service.inactivity.timeout to 45 sec
2. Opened ranger UI on multiple tabs.
3. Left the session idle for 40 secs
4. once the popup for session idle going to expire shows up clicked on the
"stay logged in" button and performed an operation in one of the tabs.
*Observation*
# Other tabs which were opened removed the RangerSessionID, but the tab which
became active before timeout still using the same RangerSessionID.
# Clicking a link from the above active tab to a new tab still uses the same
RangerSessionID which was removed earlier
# But when clicking ranger ui from CP it opens with a new RangerSessionID
*Note:*
Though using RangerSessionID which was removed in other tabs, i was able to
navigate and perform policy updates. But not sure if any other action will fail
based on session which was removed
2)
*Steps:*
1. Configured ranger.service.inactivity.timeout to 40 sec and restarted Ranger
2. Open Ranger UI on an incognito window with hrt_qa/Password@123
3. Didnt perform any operation / mouse operation for 4 mins
*Issue:*
Idle logout wizard (with "logout now" and "stay logged in" is not shown)
Diffs
-----
security-admin/src/main/webapp/scripts/controllers/Controller.js aab73b6f7
security-admin/src/main/webapp/scripts/controllers/NController.js 2598035c4
security-admin/src/main/webapp/scripts/modules/globalize/message/en.js
46e4c1901
security-admin/src/main/webapp/scripts/utils/XAUtils.js 49f03d185
Diff: https://reviews.apache.org/r/73619/diff/1/
Testing
-------
Tested that if session timeout happens in one tab and we log out from that tab
all other tabs also get logout.
Tested that user does not perform any activity than after desire time idle
logout popup appears.
Thanks,
Nitin Galave
