Exactly. We have to follow FDA guidelines for validation of OTS software and our validation expert is testing for this now. We want to make sure that security is in place that if the app is left alone for a period of time other users won't have access to it.
Debbie Shapiro, Data Warehouse Manager Office: 425.402.2233 -----Original Message----- From: André Warnier [mailto:a...@ice-sa.com] Sent: Wednesday, September 15, 2010 12:34 PM To: Tomcat Users List Subject: Re: [OT] session-timeout not taking effect Debbie Shapiro wrote: > Sorry, I probably wasn't very clear in that email. I created a second IE > instance and navigated to another page in that instance (suggestion made on > another email here) to see if that would cause Tomcat to see the first page > as inactive. It didn't. > Allright, that makes more sense then. Now another question also just by curiosity : given that the developers of that application have apparently taken pains that the session would /not/ expire while the page is being displayed, why do you want it to expire ? Is it so that the browser would not inadvertently stay open and logged-in while the user is off getting a coffee ? --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org