You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@geode.apache.org by "Jinmei Liao (JIRA)" <ji...@apache.org> on 2019/03/20 22:14:00 UTC

[jira] [Commented] (GEODE-6544) Can't log back in Pulse after an unauthorized login attempt

    [ https://issues.apache.org/jira/browse/GEODE-6544?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16797609#comment-16797609 ] 

Jinmei Liao commented on GEODE-6544:
------------------------------------

User keeps get redirected to clusterDetail.html and get "unauthorized" message again because user is considered "logged in" already. The fix could be that if we get an unauthorized exception at login, we should log out the user or redirect them to a page that would allow them to click "log out".

> Can't log back in Pulse after an unauthorized login attempt
> -----------------------------------------------------------
>
>                 Key: GEODE-6544
>                 URL: https://issues.apache.org/jira/browse/GEODE-6544
>             Project: Geode
>          Issue Type: Bug
>          Components: pulse
>            Reporter: Jinmei Liao
>            Priority: Major
>
> Steps to reproduce:
> 1) start a locator with security manager
> 2) try login using a username/password that can be authenticated, but not authorized to view the clusterDatail.html (no data.read privilege)
> 3) user gets a 403, which is correct, but then user can not get back to the login page to enter correct credentials.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)