| Author |
a very weird defect raised by our client
|
Chrix Wu
Ranch Hand
Joined: Nov 15, 2009
Posts: 121
|
|
my client reported a problem that maybe created by session (our project is using a framework which based on struts). the defect is described as followed:
1. Client A logins in, and clicks on menu item, list() method is called in the backend to list a set of products
2. now the client B logins using the same user name with another browser or machine (client A is forced to log out ) .
3. client A tries to click on the 'search' button, but it is routed to the login page, so client A re-login with the user name
4. and client A clicks on the same menu item, BUT now "search" method is called unexpectedly (rather than the list() method)
Can anyone suggest what is the possible reason to the defect?
|
** SCJP 5.0 84% **
** SCWCD 1.5 76% **
|
 |
ntumba lobo
Ranch Hand
Joined: Oct 21, 2008
Posts: 179
|
|
It looks like some state is kept between step 3 and step 4 but it is going hard to help without showing some code like jpss, Action classes, configuration ... which are involved
in the steps you present.
Are using struts2 ?
|
SCJP 5 , SCWCD 5, SCEA 5
|
|
olivier dutranoit
Ranch Hand
Joined: Aug 20, 2011
Posts: 81
|
|
Hi!
Are you using the j2ee form-based authentication framework?
in a system like that, following can happen :
-you request a servlet, jsp, whatever...
-you are not logged in yet, so the system shows you the login page first.
-after login, the system returns your original request...
could be something...
|
|
mallikarjun dontamsetti
Ranch Hand
Joined: Mar 18, 2011
Posts: 233
|
|
Chrix Wu wrote: client A tries to click on the 'search' button, but it is routed to the login page, so client A re-login with the user name
I have one question you need client A and Client be should login same time?
if not then in back end create a column is active when user login make it active if any other try to access with same user id then don't allow them
|
|
Chrix Wu
Ranch Hand
Joined: Nov 15, 2009
Posts: 121
|
|
olivier dutranoit wrote:Hi!
Are you using the j2ee form-based authentication framework?
in a system like that, following can happen :
-you request a servlet, jsp, whatever...
-you are not logged in yet, so the system shows you the login page first.
-after login, the system returns your original request...
could be something...
Yes, i am using j2ee form-based authentication framework.
as you said, after login the system should return my original request, but i HAVE clicks on the menu item, so the list() method should be called in theory.
|
|
 |
|
|
subject: a very weird defect raised by our client
|
|
|
0
