Posted by drupal4peter on February 5, 2009 at 11:38am
| Project: | Automated Logout |
| Version: | 6.x-2.x-dev |
| Component: | Miscellaneous |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed (fixed) |
Issue Summary
Hi,
what is the deeper reason to not autologout the admin (uid=1), fixed in the code ?
If one must be autologout, it should'nt be the admin ? To avoid that another person may continue with admin's session.
Thank you.
Comments
#1
I can confirm this behavior being also in version 6.x-2.1. It is important to know that the super admin (uid=1) will never be logged out automatically!
#2
You always can change from autologout.module the conditions like if ($user->uid < 2 || _autologout_by_role()) { to if (_autologout_by_role()) { and if (empty($account->uid) || $account->uid == 1) { to if (empty($account->uid)) {
#3
Yes, and thanks for the suggestion - but this should be put into the official code by this module's author. I consider this problem to be a security risk. To autologout the "root" user is more important than taking care of all the other users.
#4
#5
Seems valid to me. This should be the default. If we need a feature it would be to exempt admin from logout.
#6
Why is this issue considered to be "fixed" now?
#7
Short answer, Because it was approved, seemed like a good idea, and committed to the dev snapshot.
We'll get some testing, then we'll release a new version.
#8
Automatically closed -- issue fixed for 2 weeks with no activity.
#9
User 1 didn't have the option to disable automated logout, I have made this possible
#10
Thank you jrglasgow! Where can I find the option to disable automated logout for user 1 in Automated Logout 6.x-2.4?
#11
roball,
to answer your question... first user 1 needs to be in a role that is set to "by user". Then goto /user/1/edit and there is a checkbox in the "Account information" fieldset "Disable inactivity Automated Logout"
#12
Thanks, now I got it!
#13
Hi,
the code change is great - but a couple of comments got missed
This was very confusing as it looked like the module didn't logout uid=1
Patch attached changes a comment and theme function
#14
Committed to dev.
#15
Automatically closed -- issue fixed for 2 weeks with no activity.