[Xerte-dev] Re: Issue with XOT18 and permissions

[Pat Lockley]

Logout should destroy the session? Maybe it isn't

On 21 Oct 2012, at 09:31, Tom Reijnders <reijnders at tor.nl> wrote:

> It is, config.php is the first thing required by properties.php. The thing that I don't understand is that after logout/login, this DOES work.
> 
> 
> Op 21-10-2012 0:04, Pat Lockley schreef:
>> The session should be started by config.php
>> 
>> I think in theory it has to be the first thing done when a script executes else the session sometimes wipes itself or isn't set properly
>> 
>> Maybe because properties is a new window? Might be that reason?
>> 
>> I'd make sure there is nothing before the require config.php in properties.php
>> 
>> On 20 Oct 2012, at 13:00, Tom Reijnders <reijnders at tor.nl> wrote:
>> 
>>> You're right.
>>> 
>>> I verified that the session is indeed not set. But how come....
>>> 1. Start clean browser, and goto login page (new session is started, right?)
>>> 2. Login, and verify in debugger (or by dumping to debug.log) that $_SESSION is properly set
>>> 3. Go to property page and right after require_once("./config.php"); (which has the session_start()),  $_SESSION is empty, but the $_REQUEST and also $_COOKIE contain the correct PHPSESSID
>>> 4. Logout
>>> 5. Login again, and verify in debugger (or by dumping to debug.log) that $_SESSION is properly set
>>> 6. Go to properties page and now $_SESSION is set correctly....
>>> 
>>> I don't understand this behaviour at all.... In step 2, 3, 5 and 6 the PHPSESSID is the same.
>>> 
>>> By the way, this doesn't have anything to do with Db authentication, as I can reproduce this with Static Auth as well.
>>> 
>>> Tom
>>> 
>>> Op 19-10-2012 17:31, Pat Lockley schreef:
>>>> Sounds like the session isn't being set properly
>>>> 
>>>> On 19 Oct 2012, at 02:16, Tom Reijnders <reijnders at tor.nl> wrote:
>>>> 
>>>>> I've got a local install of the SVN version of XOT (latest)
>>>>> 
>>>>> Dont know if it has to do with the fact that I use the Db auth method, but whenever I log in the first time, I don't get permission to look at my own lerning objects, i.e. they are listed correctly in the workspace, but I can't look at the properties, preview them or edit them.
>>>>> 
>>>>> If I logout, and login again, everything seems to work fine. Anyone any idea what is going on here?
>>>>> 
>>>>> Tom
>>>>> 
>>>>> -- 
>>>>> --
>>>>> 
>>>>> Tom Reijnders
>>>>> TOR Informatica
>>>>> Chopinlaan 27
>>>>> 5242HM Rosmalen
>>>>> Tel: 073 5226191
>>>>> Fax: 073 5226196
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> Xerte-dev mailing list
>>>>> Xerte-dev at lists.nottingham.ac.uk
>>>>> http://lists.nottingham.ac.uk/mailman/listinfo/xerte-dev
>>>>> 
>>>>> This message and any attachment are intended solely for the addressee and may contain confidential information. If you have received this message in error, please send it back to me, and immediately delete it.   Please do not use, copy or disclose the information contained in this message or in any attachment.  Any views or opinions expressed by the author of this email do not necessarily reflect the views of the University of Nottingham.
>>>>> 
>>>>> This message has been checked for viruses but the contents of an attachment
>>>>> may still contain software viruses which could damage your computer system:
>>>>> you are advised to perform your own checks. Email communications with the
>>>>> University of Nottingham may be monitored as permitted by UK legislation.
>>>> _______________________________________________
>>>> Xerte-dev mailing list
>>>> Xerte-dev at lists.nottingham.ac.uk
>>>> http://lists.nottingham.ac.uk/mailman/listinfo/xerte-dev
>>> -- 
>>> --
>>> 
>>> Tom Reijnders
>>> TOR Informatica
>>> Chopinlaan 27
>>> 5242HM Rosmalen
>>> Tel: 073 5226191
>>> Fax: 073 5226196
>>> 
>>> 
>>> _______________________________________________
>>> Xerte-dev mailing list
>>> Xerte-dev at lists.nottingham.ac.uk
>>> http://lists.nottingham.ac.uk/mailman/listinfo/xerte-dev
>> _______________________________________________
>> Xerte-dev mailing list
>> Xerte-dev at lists.nottingham.ac.uk
>> http://lists.nottingham.ac.uk/mailman/listinfo/xerte-dev
> 
> -- 
> --
> 
> Tom Reijnders
> TOR Informatica
> Chopinlaan 27
> 5242HM Rosmalen
> Tel: 073 5226191
> Fax: 073 5226196
> 
> 
> _______________________________________________
> Xerte-dev mailing list
> Xerte-dev at lists.nottingham.ac.uk
> http://lists.nottingham.ac.uk/mailman/listinfo/xerte-dev