[ZBX-603] too short autologout period setting is possible Created: 2008 Nov 21  Updated: 2017 May 30  Resolved: 2009 Mar 09

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: 1.6
Fix Version/s: 1.6

Type: Incident report Priority: Major
Reporter: richlv Assignee: Unassigned
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

1.6 branch, revision 6326


 Description   

user can lock himself out by setting autologout to a very short period.
to verify, set autologout in the profile to 1 second. it is not possible to log in & change this anymore.
simple solution could be to introduce a minimal required autologin period, though this should take into account usage over slow (think gprs) connections.
something like 30-60 seconds could work as the minimal required value.

 Comments   
Comment by richlv [ 2009 Mar 06 ]

can't confirm the fix in trunk, revision 6882.
while frontend shows 90 after saving, actual entered value is saved. to test : enter some value (60 for our test ), press save. form shows 90. reload profile (you might have to click on 'profile' link again & refresh the page) - 60 seconds have been saved.

also, currently, logout period is silently reset to 90 for displaying in the form if smaller. maybe it's possible to print warning about this as 'details' ?

Comment by richlv [ 2009 Mar 09 ]

confirming the fix in trunk, revision 6894

that checkbox with "Disabled" next to it looks confusing, though - it seems as if marking the checkbox would disable outologout, when it's the opposite instead.

i would suggest showing the input field all the time, but disabling it when checkbox is unmarked

Comment by richlv [ 2009 Mar 11 ]

"Disabled" text changing to disabled inputfield filed as ZBX-776 - otherwise such comments tend to (understandably) be missed...

Generated at Fri Apr 26 00:48:02 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.