Author: david
Date: Wed Oct  7 14:53:32 2009
New Revision: 3683

Log:
Remove user_id and other attributes when session is timed out. Fixes issue 
#1049.

Modified:
   trunk/apps/qubit/lib/myUser.class.php

Modified: trunk/apps/qubit/lib/myUser.class.php
==============================================================================
--- trunk/apps/qubit/lib/myUser.class.php       Wed Oct  7 14:28:51 2009        
(r3682)
+++ trunk/apps/qubit/lib/myUser.class.php       Wed Oct  7 14:53:32 2009        
(r3683)
@@ -19,6 +19,18 @@
 
 class myUser extends sfBasicSecurityUser
 {
+  public function initialize(sfEventDispatcher $dispatcher, sfStorage 
$storage, $options = array())
+  {
+    // initialize parent
+    parent::initialize($dispatcher, $storage, $options);
+
+    // On timeout, remove *all* user credentials
+    if ($this->isTimedOut())
+    {
+      $this->signOut();
+    }
+  }
+
   public function signIn($user)
   {
     $this->setAuthenticated(true);

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Qubit Toolkit Commits" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.ca/group/qubit-commits?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to