[ 
http://mifosforge.jira.com/browse/MIFOS-1558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=69700#comment-69700
 ] 

Rebecca Scott commented on MIFOS-1558:
--------------------------------------

tbd-archive
                
> Firefox:  Error when mifos is re-opened before session time-out
> ---------------------------------------------------------------
>
>                 Key: MIFOS-1558
>                 URL: http://mifosforge.jira.com/browse/MIFOS-1558
>             Project: mifos
>          Issue Type: Bug
>          Components: Authentication
>    Affects Versions: Release 1.0
>         Environment: Platform: All, OS: All
>            Reporter: aliyaw
>            Assignee: Stanley Kwok
>            Priority: Major
>              Labels: BrowserSpecific
>             Fix For: Mifos Backlog
>
>
> REPRO:
> ======
> 1.  Log into Mifos (v1.0 or later) as an Admin role
> 2.  Select Admin tab -> view office hierarchy
> 3.  Close browser
> 4.  Open new browser immediately and enter URL for Mifos application
> OBSERVED:
> =========
> 1.  User is taken directly to 'View office hierarchy page' (without needing to
> log in again)
> 2.  There is an error on the page saying "You do not have permissions to 
> perform
> this activity. Contact your system administrator to grant you required
> permissions and try again."
> EXPECTED:
> =========
> No error message.
> User should have to re-login for security reasons (this behavior should be
> validated by Triage/other PMs)
> Other notes - this is probably something that can wait until post-v1.1 to fix
> unless others feel that it is a major security concern.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
http://mifosforge.jira.com/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2dcopy2
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues

Reply via email to