On Feb 12, 3:11 pm, andres <[email protected]> wrote: > def end_session(self): > session.delete() > return 'session deleted' > > When you access start_session and test_session everything works as > expected, but end_session does not remove the session from the server > and it also doesn't expire the cookie.
I just hit this issue today - imagine my surprise when I logged out my admin user and logged in a non-admin user and found myself with all of my admin settings :) > This modified action does work though: > > def end_session(self): > session.save() > session.delete() > return 'session deleted' Thanks for the workaround - this fixes my problem. > Am I not understanding something about the way sessions work? Why you > have to save() before calling delete()? Is this a bug? I recall reading that there were some changes to session handling in Pylons 0.9.7, but I seem to recall that they were related to automatically saving sessions, not removing them. -- Ross Vandegrift [email protected] "If the fight gets hot, the songs get hotter. If the going gets tough, the songs get tougher." --Woody Guthrie --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en -~----------~----~----~----~------~----~------~--~---
