[jira] [Resolved] (CLOUDSTACK-3256) UI - AWS Regions - When switching between regions after logging out and logging in as a different user , we are authenticated as the previous user probably due to browser cache.

["Jessica Wang (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-3256?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jessica Wang resolved CLOUDSTACK-3256.
--------------------------------------

    Resolution: Invalid

> Scenario1: 
> User is not prompted for password and is directed to "Region1" UI. 
> Expected Bhevaior: 
> User should be prompted for password. 
No, user should NOT be prompted for password in this scenario since user only needs to enter credentials for the same domain once.


> Scenario2: 
> From Region2 (where we are logged in as "user2") , now switch to "Region1". 
> User is not prompted for password. 
> He is redirected to "Region1" and is authenticated as "user1". 
This is expected behavior since the last time user was on Region1 was as "user1", not as "user2".

                
> UI - AWS Regions - When switching between regions after logging out and logging in as a different user , we are authenticated as the previous user probably due to browser cache. 
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-3256
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3256
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Management Server
>    Affects Versions: 4.2.0
>         Environment: Build from master
>            Reporter: Sangeetha Hariharan
>            Assignee: Jessica Wang
>            Priority: Critical
>             Fix For: 4.2.0
>
>
> UI - AWS Regions - When switching between regions after logging out and logging in as a different user , we are authenticated as the previous user.
> Steps to reproduce the problem:
> Set up - 2 Regions -  Region1 and Region2.
> Scenario1:
> Log in as "user1" to Region1.
> Switch to Region2.
> User is prompted for password .
> Enter username and password for "user1".
> User is logged in to "Region2" successfully.
>  
> From Region2 , now switch to "Region1".
> User  is not prompted for password and is directed to "Region1" UI.
> Expected Bhevaior:
> User  should be prompted for password.
> Scenario2:
> Log in as "user1" to Region1.
> Switch to Region2.
> User is prompted for password .
> Enter username and password for "user1".
> User is logged in to "Region2" successfully.
> Log out.
> Log in as "user2". 
> From Region2  (where we are logged in as "user2") , now switch to "Region1".
> User  is not prompted for password.
> He is redirected to "Region1" and is authenticated as "user1".
> Expected Bhevaior:
> User  should be prompted for password.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira