Odoo Help

Welcome!

This community is for beginners and experts willing to share their Odoo knowledge. It's not a forum to discuss ideas, but a knowledge base of questions and their answers.

0

shouldn't v8 end a user session when server is stopped/restarted?

By
gunnar
on 8/17/14, 9:06 PM 758 views

I guess odoo should end user sessions when the server is being stop/restarted and require a new login procedure when it come up again (which is standard behavior in v7) v8 doesn't do that. Seems as sessions are 'eternal'. Is that a new feature or a bug?

EDIT: filed a bug report here https://github.com/OCA/OCB/issues/38

0

Ben Bernard

--Ben Bernard--
1083
| 4 3 6
Jakarta, Indonesia
--Ben Bernard--
Ben Bernard
On 8/22/14, 11:47 AM

I don't know about version 7, but in version 6.1 the behavior is 'eternal', like you said for version 8. I think this is by design and not a bug. The root problem is the design of session cookie. If what you want is not 'eternal' session, the session should be stored in database. I think there is already a module for this.

Talking about session cookies, there should be a configuration / code to change the expired date option (or a generation of a secret number to invalidate the session), but I haven't check it yet.
 

aren't eternal Sessions pretty insecure? especially due to the fact that OE targets at being used online. (Imagine you login in an internet cafe or whateer public or semi-public place [like your colleagues terminal in the office on the upper floor], forget to logout, electricity dropout ...) Your whole data is exposed to that machine. Isn't it a little strange to have such by design?

gunnar
on 8/22/14, 8:21 PM

Yes, I agree with you. But, we already live with this kind of problem (not limited to Odoo only). One solution to improve your Odoo service is to use full https. The tradeoff is usually convenience for user (such as performance), but this is only my opinion.

Ben Bernard
on 8/24/14, 8:14 AM

Your Answer

Please try to give a substantial answer. If you wanted to comment on the question or answer, just use the commenting tool. Please remember that you can always revise your answers - no need to answer the same question twice. Also, please don't forget to vote - it really helps to select the best questions and answers!

About This Community

This community is for professionals and enthusiasts of our products and services. Read Guidelines

Question tools

1 follower(s)

Stats

Asked: 8/17/14, 9:06 PM
Seen: 758 times
Last updated: 3/16/15, 8:10 AM