Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 174
  • Last Modified:

Roles don't refresh after log out

I have a cflogin-based application.  I have a typical setup with the suggested cflogin structure in the web application construction kit and in the CFdocs.  I have a user interface that allows an admin to update a user's roles.  The problem is that when a user logs in after the roles have been updated, they still have access to all the pages they did before.  How can I make the CF application server requery roles every time a user logs in?  
0
OmegaProgrammer
Asked:
OmegaProgrammer
1 Solution
 
anandkpCommented:
well i guess this is a browser cache issue

purge ur browser cache & chk again - it shld !
0
 
mrichmonCommented:
If you are storing the information in  cookies then you may need to clear the user cookies and re-write them.
0
 
OmegaProgrammerAuthor Commented:
Well I'm storing the login information in the cfloginuser structure and using the IsUserInRole function.  I assumed that when I ran the cflogout command that it would clear it, but apparently it doesn't.  Any suggestions?
0
 
mrichmonCommented:
From the cold fusion web app construction kit:

"Behind the scenes the <cflogin> framework sets a cookie on the browser machine to remember the user has logged in"

So it is possible that the cookie is not getting cleared.

Additionally you may want to try using the optional attribute IDLETIMEOUT="seconds"

The default is 1800 seconds (30 min).  You could try setting this to 300 (5 min) and see what happens....
0
 
LeaperJPDCommented:
I think this would be related to the session variables / etc. that coldfusion uses.  Stuff this code into the onrequestend.cfm template for the application in question.

 <cfif IsDefined("cookie.CFID")>
 <cfcookie name="CFID" value="#cookie.CFID#">
</cfif>
<cfif IsDefined("cookie.CFToken")>
 <cfcookie name="CFToken" value="#cookie.CFToken#">
</cfif>

or just put that code at the end of each page where you expect the user to log out, but DO NOT use it after a cflocation or it won't work.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now