Wont that need an application var. per user ?
-----Original Message-----
From: Bryan LaPlante [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 04, 2001 4:10 PM
To: CF-Talk
Subject: Re: Concurrent users and client certificates
Ok if my logic is not totally wacky here, what I am proposing is that the
top level application variable will come and go with ever page request. The
factor that determines that the user is loggedin is a match between the
application and cookie var of the same name.
<CFIF IsDefined("Application.kgilchrist")>
<CFIF NOT IsDefined("Cookie.kgilchrist")>
<!--- User is logged in somewhere else --->
<CFSET accessDenied = StructDelete(Application, kgilchrist)>
<CFELSE>
<!--- It's just me again --->
<CFSET accessDenied = "false">
</CFIF>
<CFELSE>
<!--- I was logged in but someone deleted my application var --->
<CFSET Application.kgilchrist = "loggedin">
<CFCOOKIE NAME="kgilchrist" VALUE="loggedin">
</CFIF>
----- Original Message -----
From: "Kevin Gilchrist" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, April 04, 2001 9:27 AM
Subject: Concurrent users and client certificates
> Hi all,
>
> I need to meet a business requirement where the same user cannot be logged
> in concurrently, i.e. if I log in a kgilchrist from one machine, I can't
log
> in again from another machine until at least the first session ends.
>
> At the moment users are given a client certificate which I authenticate
> against a database and I then set a few session variables to mark them as
> authenticated etc. The session vars are disassociated when the browser
> closes loses the temp cookie.
>
> As part of the authentication process, do I need to somehow search through
> all the other sets of session variables? How would I do that?
>
> >From reading some of the threads on the list it seems that using session
> variables isn't necessarily a good thing either. Need to do some
> reading....
>
> Thanks,
> Kevin
>
> Kevin Gilchrist
> Senior Consultant
> RedSiren Technologies Inc.
> (412) 281 4427 ext 466
>
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
