Saturday, April 24, 2010

That testy litte Pop-UP, "For security purposes..."

When you open a browser on your machine it starts something called a SessionId.

As long as your browser remains open, it is holding data generated when the SessionId was originated that identifies you & your machine. You will only be allowed to login into the site one time with this specific data set.

The trigger, for that testy pop-up,

... occurs when you attempt to re-establish, create a second secure connection with our system, within the same browser SessionId. The system’s refusal to allow this is not unlike the security protocols for your on-line banking tool. There is no way we can manage all of the Security & Permission options within the application and allow you to re-login without flushing all of the SessionId variables from your prior SessionId.

What to avoid if you don’t like our little pop-up?

1. Don’t open multiple Tabs, those other Tabs are sharing the same SessionId. That means a pop-up for you, even if you are not in our site, as long as that tab is open. This is the number one circumstance that confuses the user.

2. Even if you use the Log Out button, don’t try to re-enter the site. Our current command is to simply close your connection with the site. We could make it request that your browser close. If we do you would get a Window’s pop-up asking if it is OK for an application attempting to close your browser to do so. When you say OK, all other tabs will close as well. Current user feedback is they would prefer that not happen. Kind of a frying pan or the fire question. Not always right. Always wrong it seems for a given moment’s choice of action.

3. Don’t use your Favorites or the history from your address drop down to just navigate away from the site.

4. Don’t use < Ctrl v > to pop any new windows in your SessionId, which is simply the original version of Tabs.

5. Don’t use the menu service; File > New Window. That is just for folks like me who  don’t use keystroke commands like “< ctrl. v > “

You can do the following.

1. CLOSE THE BROWSER WHEN YOU EXIT THE SITE. That means use teh little red "x" in the upper right corner.

2. If you run IE 7 or higher; File > New Session. It is truly a new session. So if your business needs require a second browser window that will work.

Note: Realize the system is not making a mistake. The code specifically looks for a match to prior variables found in a SessionId that has already connected. You do have the original SessionId open, even when you think you don’t and for security purposes we insist you close it.