Tuesday, March 27, 2012

New Log Off code to help with Login frustration


calan made a choice 5 years ago to allow a User to let a 30 minute period of time pass without interacting with the system and on then on their next click be provided a Re-Login screen; so that any data they had entered would be saved and the action they were requesting could be seamlessly continued. This feature requires that the User’s unique browser session be stored and checked by every page on the entire system before executing the request. So we could not allow a single User to have two simultaneous occurrences in the system, say the shipping page for Project A, and the Shipping page for Project B open on two separate tabs of the same browser session (all TABS of one browser session hold the same session ID). If one or both were allowed to sit for 30 minutes when the User selected an action, Re-logged in popped up and the User Re-logged in, the system could inadvertently substitute one session occurrence for the other, resulting in data from Project A being updated in Project B.

So you got this:

 I know not every User uses Tabs. However, the same cross over situation could occur if a user returned to the Login screen in a single browser session after having previously navigated away from the site and having not closed their browser (creating a new session) before a Login a second time. We saw the same session variable, the one already being stored, so for that that User we popped the now “infamous” message above.
While we cannot remove the protective code as described above, it is laced into every page and required to retain the Re-Login feature; we can offer a solution that places the User in control. The system has always had a Log Off button.

Yes the little red button in the upper right corner of every screen, that few Users make use of. We have updated the code of that button to flush the stored browser session when selected. We know by this action that the User has consciously said I am leaving the site, you DO NOT need to hold the session key so that I can easily Re-Login…I’m gone for now. If the User selects this button to leave the site they will be placed on the site’s Login screen. They could immediately Log back in if they choose or go to another URL, return later and even though they never left their original browser session Login because we are no longer storing that original browser session. But ONLY when the User selected the LOG Off button to exit the site after their original use of the site. If they did not they will receive a NEW pop-up on attempting to Login to the site.

You currently have an existing Browser session open in the site. You cannot enter the site with a second Login using the SAME Browser session. Please COMPLETELY close your Browser, reopen it and Login to the site.
TO AVOID RECEIVING THIS MESSAGE IN THE FUTURE ALWAYS EXIT THE SITE USING THE LOG OFF BUTTON LOCATED IN THE UPPER RIGHT CORNER OF EVERY SCREEN.

Please communicate this new update to your community. The pop-up itself is worded to be self educating but Users are notorious for not reading and given the fact that this is a new message it is even more likely they will just assume the status quo and close the browser, missing the new message.