Session expiration not visible when editing issues
|Category:||Accounts / authentication|
Session expiration not visible when editing issues¶
As some tickets already address redmine's behavior when you are currently editing a ticket and get (in the meantime) logged out, this addresses an aditional scenario:
if your session has expired, you can still click on edit for a currently shown issue and editing is still possible.
However if you hit save you will be notified your session has expired. Selecting Back (on firefox) redirects you to the login page and your edits are lost.
How to test¶
Select an issue (viewing mode)
open redmine in a second tab and logout on this
Return to the issue tab
Select edit (editing is possible)
--> you will be notified that your session is expired and your edits are lost
If your session has expired at least the "edit" function should be blocked and user should get notification on invalid session. Ideally the user would be shown (when session expires during editing) the login-dialog with the possibility to authenticate, resume and save the current edit.
Redmine version 3.3.0.stable
Ruby version 2.1.4-p265 (2014-10-27) [x86_64-linux]
Rails version 4.2.6
Database adapter Mysql2