a very weird defect raised by our client

[Chrix Wu]

my client reported a problem that maybe created by session (our project is using a framework which based on struts). the defect is described as followed:

1. Client A logins in, and clicks on menu item, list() method is called in the backend to list a set of products

2. now the client B logins using the same user name with another browser or machine (client A is forced to log out ) .

3. client A tries to click on the 'search' button, but it is routed to the login page, so client A re-login with the user name

4. and client A clicks on the same menu item, BUT now "search" method is called unexpectedly (rather than the list() method)

Can anyone suggest what is the possible reason to the defect?

[ntumba lobo]

It looks like some state is kept between step 3 and step 4 but it is going hard to help without showing some code like jpss, Action classes, configuration ... which are involved
in the steps you present.
Are using struts2 ?

[olivier dutranoit]

Hi!

Are you using the j2ee form-based authentication framework?

in a system like that, following can happen :

-you request a servlet, jsp, whatever...
-you are not logged in yet, so the system shows you the login page first.
-after login, the system returns your original request...

could be something...

[mallikarjun dontamsetti]

Chrix Wu wrote: client A tries to click on the 'search' button, but it is routed to the login page, so client A re-login with the user name

I have one question you need client A and Client be should login same time?
if not then in back end create a column is active when user login make it active if any other try to access with same user id then don't allow them

[Chrix Wu]

olivier dutranoit wrote:Hi!

Are you using the j2ee form-based authentication framework?

in a system like that, following can happen :

-you request a servlet, jsp, whatever...
-you are not logged in yet, so the system shows you the login page first.
-after login, the system returns your original request...

could be something...

Yes, i am using j2ee form-based authentication framework.

as you said, after login the system should return my original request, but i HAVE clicks on the menu item, so the list() method should be called in theory.