On 12/29/06, MR <[EMAIL PROTECTED]> wrote:

Lee, Thanks a ton for your advice. What you say makes good sense. I
really don't expect that two users would be on the same browser at the
same time, but I was trying to anticipate the case where maybe a family
shares a computer and all shares the same browser without closing out
sessions. I simply want to prevent the case where mom, dad, brother,
and sister all end up getting frustrated because their account acts
weird as described.

If the app in question is that sensitive that if a user doesn't log
out and allows someone else to browse back to the site using their
account details then you should make very short sessions and have
warnings everywhere on log in/registration/etc.  Otherwise I don't see
this happening very often at all and it may not be worth the extra
effort to work around this particular scenario.


So, it sounds as though this simple redirect is just what you allude to
-- more an act of convenience than anything else, because if User1
wanted, User1 could simply be malicious and go straight into User2's
account instead of messing around with a maimed account.


Yes, but that's the case with every shared computer.  If I leave my
account up and running on my Mac then anyone could read my emails,
look at my address book and use my websites with passwords stored in
the keychain.  It's just one of those things with shared computers.

Lee


--
Lee McFadden

blog: http://www.splee.co.uk
work: http://fireflisystems.com
skype: fireflisystems

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/turbogears?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to