https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15428

--- Comment #8 from David Cook <[email protected]> ---
(In reply to Katrin Fischer from comment #7)
> Marked bug 32385 as a dependency for this one. I think in order to have
> different timeouts, we need different sessions first.

I was thinking about alternatives but I think you might be right. 

In theory, an alternative would be to change how we handle timeouts. At the
moment, the session is deleted if it's timed out, but we could remove those
lines and leave the cleanup to the cleanup_database.pl cronjob.

If someone was working in both the staff interface and OPAC, the OPAC could
time out and prompt for login while they continued working in the staff
interface. Then if they log into the OPAC, both interfaces will use the new
session and new session cookie. 

However, I wonder if a browser might accidentally overwrite the new CGISESSID
with the old CGISESSID if a staff interface action happens shortly after the
new OPAC login...

Maybe different sessions are the way to go.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to