We hope you'll join us for our 4/23 webinar on using data tables to apply reference ranges and AE codes in OC4. For more information and to register, visit https://register.gotowebinar.com/register/2882170018956684555

User Session Auto-Logout Preference: Browser or Tab?

Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
Thanks,
Ben
-----
Ben Baumann | OpenClinica, LLC
Direct phone: 781.547.8422
[email protected] | www.openclinica.com
Open source platform for clinical research.
«1

Comments

  • Dear Ben,

    It wouldn’t work for me. I often open and close numerous tabs (20+) when doing extracts, deleting data from CRFs and setting up studies. If the setting was on a per-user or per-role basis, this might work for those doing data entry, whose tasks should be single-threaded.

    Yours,

    Michael
    Sent: 20 September 2012 19:58
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.

    The University of Dundee is a registered Scottish Charity, No: SC015096
  • JanusJanus Posts: 260
    Dear Ben,
    Worst idea! Please don't implement this, as I - like Michael - use the multi tab alot. This would break my flow of work and would essentially degrade my experience of OpenClinica to a quite unplesant experience. Too, when I train monitors and CRCs, I advocate the use of multi tabs to easen the navigation and overview of data. People just have to use the Log Out button. Perhaps you could set the session time out to something lower. Perhaps make it an OpenClinica timing-thing, so you could have different time outs for the various roles?
    Best,
    Janus
    Michael Bluett
    Sent by: [email protected]
    21-09-2012 11:10
    Please respond to
    [email protected]

    To
    "[email protected]"
    cc

    Subject
    Re: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Dear Ben,

    It wouldn’t work for me. I often open and close numerous tabs (20+) when doing extracts, deleting data from CRFs and setting up studies. If the setting was on a per-user or per-role basis, this might work for those doing data entry, whose tasks should be single-threaded.

    Yours,

    Michael
    Sent: 20 September 2012 19:58
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.

    The University of Dundee is a registered Scottish Charity, No: SC015096
  • Hi Ben,

    I fully agree with Janus and Michael. This would be totally useless and would render OpenClinica useless for most uses we are happy with today. If this would be a configurable choice during study set up, I could live with it, but I certainly do not need it today.

    Best regards

    Krister
    Sent: Thursday, September 20, 2012 8:58 PM
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.
  • wolfwolf Posts: 4
    Hi Ben,
    I would argue in favor of having the option of customizing this feature. I can imagine certain situations where I would want openclinica to log out users once the tab closes (for security reasons, to prevent unauthorized access) - at least, we would implement it this way.
    Best regards
    Wolf
    pharmtrace
    Am 22.09.2012 22:02, schrieb Krister Kristianson beta-JUDO, Uppsala University:
    >
    > Hi Ben,
    >
    >
    >
    > I fully agree with Janus and Michael. This would be totally useless and would render OpenClinica useless for most uses we are happy with today. If this would be a configurable choice during study set up, I could live with it, but I certainly do not need it today.
    >
    >
    >
    > Best regards
    >
    >
    >
    > Krister
    >
    >
    >
    >
    > Sent: Thursday, September 20, 2012 8:58 PM
    > To: [email protected]
    > Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?
    >
    >
    >
    > Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    >
    > This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    >
    > Thanks,
    > Ben
    > -----
    >
    > Ben Baumann | OpenClinica, LLC
    > Direct phone: 781.547.8422
    > [email protected] | www.openclinica.com
    >
    > Open source platform for clinical research.
    >
    >
    >
    >
    >
  • abertuzziabertuzzi Posts: 51
    Hi all,
    considering that in a Hospital environment a workstation is often used by different persons, I think that the possibility that an OpenClinica user session can be continued by another person after the OpenClinica tab has been closed (and not the browser) is really critical to preserve controlled access to the data and for the attributability of actions performed in the system (e.g. entry of data, signing events).

    It is common sense that closing a tab in the browser actually ends your session with that application.
    The fact that the session can be simply continued by recalling the OpenClinica login URL can really breach the confidence in how the system preserves data integrity.
    It can be practical when a person has continued control on the computer but it is a real threat for shared use workstations.

    For these reasons I would really support that OpenClinica logs users out when they close a tab.
    (frankly speaking I thought it was already so. I have made a test and the fact that OpenClinica opens up again without asking the credentials is a little "surprising")

    Best regards,
    Armando
    Sent: Saturday, September 22, 2012 10:03 PM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Hi Ben,

    I fully agree with Janus and Michael. This would be totally useless and would render OpenClinica useless for most uses we are happy with today. If this would be a configurable choice during study set up, I could live with it, but I certainly do not need it today.

    Best regards

    Krister
    Sent: Thursday, September 20, 2012 8:58 PM
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.
  • sderiddersderidder Posts: 57
    Hi Ben,
    Wouldn't work for me either; I tend to use multiple tabs whilst developing. It would definitely degrade the experience for me if closing a tab would kill my session.
    Cheers,
    Sander
    -----Original Message-----
    Sent: 21 September 2012 15:28
    To: [email protected]
    Subject: Users Digest, Vol 78, Issue 67
    Send Users mailing list submissions to
    [email protected]
    To subscribe or unsubscribe via the World Wide Web, visit
    https://mailman.openclinica.com/listinfo/users
    or, via email, send a message with subject or body 'help' to
    [email protected]
    You can reach the person managing the list at
    [email protected]
    When replying, please edit your Subject line so it is more specific than "Re: Contents of Users digest..."
    Today's Topics:
    1. Re: User Session Auto-Logout Preference: Browser or Tab?
    (Michael Bluett)
    2. Re: User Session Auto-Logout Preference: Browser or Tab?
    (Janus Engstr?m)
    3. Re: OC i18n: French (Hiroaki Honshuku)
    ----------------------------------------------------------------------
    Message: 1
    Date: Fri, 21 Sep 2012 08:48:30 +0000
    From: Michael Bluett
    To: "[email protected]"
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or
    Tab?
    Message-ID:
    <[email protected]4.prod.outlook.com>

    Content-Type: text/plain; charset="us-ascii"
    Dear Ben,
    It wouldn't work for me. I often open and close numerous tabs (20+) when doing extracts, deleting data from CRFs and setting up studies. If the setting was on a per-user or per-role basis, this might work for those doing data entry, whose tasks should be single-threaded.
    Yours,
    Michael
    Sent: 20 September 2012 19:58
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.
    The University of Dundee is a registered Scottish Charity, No: SC015096
    -------------- next part --------------
    An HTML attachment was scrubbed...
    URL:
    ------------------------------
    Message: 2
    Date: Fri, 21 Sep 2012 14:11:18 +0200
    From: Janus Engstr?m
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or
    Tab?
    Message-ID:

    Content-Type: text/plain; charset="utf-8"
    Dear Ben,
    Worst idea! Please don't implement this, as I - like Michael - use the multi tab alot. This would break my flow of work and would essentially degrade my experience of OpenClinica to a quite unplesant experience. Too, when I train monitors and CRCs, I advocate the use of multi tabs to easen the navigation and overview of data. People just have to use the Log Out button. Perhaps you could set the session time out to something lower.
    Perhaps make it an OpenClinica timing-thing, so you could have different time outs for the various roles?
    Best,
    Janus
    Michael Bluett
    Sent by: [email protected]
    21-09-2012 11:10
    Please respond to
    [email protected]
    To
    "[email protected]"
    cc
    Subject
    Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Dear Ben,

    It wouldn?t work for me. I often open and close numerous tabs (20+) when
    doing extracts, deleting data from CRFs and setting up studies. If the
    setting was on a per-user or per-role basis, this might work for those
    doing data entry, whose tasks should be single-threaded.

    Yours,

    Michael
    On Behalf Of Ben Baumann
    Sent: 20 September 2012 19:58
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Would it be useful to have OpenClinica log users out when they close a tab
    in their browser (as opposed to closing the whole browser)? It seems most
    web applications log users out when the entire browser closes (including
    my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what
    the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.

    The University of Dundee is a registered Scottish Charity, No: SC015096
  • haenselhaensel Posts: 602 ✭✭✭
    I fully agree with Amando's point of view. Closing the tab should trigger the logoff (what other intention might someone have, than stop working with OpenClinica).
    Regards,
    Christian
    ------------------------------------------------------------------------
    Dipl.-Inf. Christian Hänsel

    IT / Software Developer
    Tel.: +49-(0)89-5526189-16
    Fax : +49-(0)89-5526189-55
    E-Mail: [email protected]
    ReliaTec GmbH
    Schleissheimer Str. 37
    85748 Garching Germany
    HRB 150060 / AG München
    Gf Thomas Herbig
    http://www.reliatec.de
    =========================================================================
    Am 24.09.2012 09:06, schrieb Bertuzzi, Armando [Nervianoms]:
    > Hi all,
    > considering that in a Hospital environment a workstation is often used
    > by different persons, I think that the possibility that an OpenClinica
    > user session can be continued by another person after the OpenClinica
    > tab has been closed (and not the browser) is really critical to preserve
    > controlled access to the data and for the attributability of actions
    > performed in the system (e.g. entry of data, signing events).
    >
    > It is common sense that closing a tab in the browser actually ends your
    > session with that application.
    > The fact that the session can be simply continued by recalling the
    > OpenClinica login URL can really breach the confidence in how the system
    > preserves data integrity.
    > It can be practical when a person has continued control on the computer
    > but it is a real threat for shared use workstations.
    >
    > For these reasons I would really support that OpenClinica logs users out
    > when they close a tab.
    > (frankly speaking I thought it was already so. I have made a test and
    > the fact that OpenClinica opens up again without asking the credentials
    > is a little "surprising")
    >
    > Best regards,
    > Armando
    >
    >
    >
  • JanusJanus Posts: 260
    Ok, it's seems like the feature of logging off triggered by a tab close has divided the users here into two groups: pro and con. So to be able to give both group what they want, this feature should be configurable on a *per study* basis.
    As an alternative, perhaps some plugin exists for Firefox, Opera and Internet Explorer that prohibits the use of multi tabs for certain web sites.
    Besides that, I have never seen a shared workstation, in the sense that multiple users use the same logon, except for highly specialised software installations, where a web browser is definitely not part of the software stack. I cannot see why OpenClinica should be considered a "breach in confidence", when the real problem is - IMHO - the breach of common practice?
    Best regards,
    Janus
    Christian Hänsel
    Sent by: [email protected]
    24-09-2012 09:59
    Please respond to
    [email protected]

    To
    [email protected]
    cc

    Subject
    Re: [Users] User Session Auto-Logout Preference: Browser or Tab?

    I fully agree with Amando's point of view. Closing the tab should trigger the logoff (what other intention might someone have, than stop working with OpenClinica).
    Regards,
    Christian
    ------------------------------------------------------------------------
    Dipl.-Inf. Christian Hänsel
    IT / Software Developer
    Tel.: +49-(0)89-5526189-16
    Fax : +49-(0)89-5526189-55
    E-Mail: [email protected]
    ReliaTec GmbH
    Schleissheimer Str. 37
    85748 Garching Germany
    HRB 150060 / AG München
    Gf Thomas Herbig
    http://www.reliatec.de
    =========================================================================
    Am 24.09.2012 09:06, schrieb Bertuzzi, Armando [Nervianoms]:
    Hi all,
    considering that in a Hospital environment a workstation is often used
    by different persons, I think that the possibility that an OpenClinica
    user session can be continued by another person after the OpenClinica
    tab has been closed (and not the browser) is really critical to preserve
    controlled access to the data and for the attributability of actions
    performed in the system (e.g. entry of data, signing events).
    It is common sense that closing a tab in the browser actually ends your
    session with that application.
    The fact that the session can be simply continued by recalling the
    OpenClinica login URL can really breach the confidence in how the system
    preserves data integrity.
    It can be practical when a person has continued control on the computer
    but it is a real threat for shared use workstations.
    For these reasons I would really support that OpenClinica logs users out
    when they close a tab.
    (frankly speaking I thought it was already so. I have made a test and
    the fact that OpenClinica opens up again without asking the credentials
    is a little "surprising")
    Best regards,
    Armando
  • mikewormikewor Posts: 35
    Agree it should be configurable, but not sure if it is per study? The use case for it is in a hospital ward for data capture (as I understand it). I think it makes more sense to configure on a per user basis. Then to push this further, it only makes sense to implement this if the user is not allowed multiple tabs for open clinica - I think it should be possible to disable 'open in new tab' on the context menu if LogoutOnTabClose is true.
    Regards
    Mike
    On 24/09/2012 10:46, Janus Engstrøm wrote:
    >
    > Ok, it's seems like the feature of logging off triggered by a tab close has divided the users here into two groups: pro and con. So to be able to give both group what they want, this feature should be configurable on a *per study* basis.
    >
    > As an alternative, perhaps some plugin exists for Firefox, Opera and Internet Explorer that prohibits the use of multi tabs for certain web sites.
    >
    > Besides that, I have never seen a shared workstation, in the sense that multiple users use the same logon, except for highly specialised software installations, where a web browser is definitely not part of the software stack. I cannot see why OpenClinica should be considered a "breach in confidence", when the real problem is - IMHO - the breach of common practice?
    >
    >
    > Best regards,
    > Janus
    >
    >
    >
    > Christian Hänsel
    > Sent by: [email protected]
    >
    > 24-09-2012 09:59
    > Please respond to
    > [email protected]
    >
    >
    > To
    > [email protected]
    > cc
    >
    > Subject
    > Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    >
    >
    >
    >
    >
    >
    >
    > I fully agree with Amando's point of view. Closing the tab should trigger the logoff (what other intention might someone have, than stop working with OpenClinica).
    >
    > Regards,
    > Christian
    > ------------------------------------------------------------------------
    >
    > Dipl.-Inf. Christian Hänsel
    >
    > IT / Software Developer
    >
    > Tel.: +49-(0)89-5526189-16
    > Fax : +49-(0)89-5526189-55
    > E-Mail: [email protected]
    >
    > ReliaTec GmbH
    > Schleissheimer Str. 37
    > 85748 Garching Germany
    > HRB 150060 / AG München
    > Gf Thomas Herbig
    > http://www.reliatec.de
    >
    > =========================================================================
    > Am 24.09.2012 09:06, schrieb Bertuzzi, Armando [Nervianoms]:
    > Hi all,
    > considering that in a Hospital environment a workstation is often used
    > by different persons, I think that the possibility that an OpenClinica
    > user session can be continued by another person after the OpenClinica
    > tab has been closed (and not the browser) is really critical to preserve
    > controlled access to the data and for the attributability of actions
    > performed in the system (e.g. entry of data, signing events).
    >
    > It is common sense that closing a tab in the browser actually ends your
    > session with that application.
    > The fact that the session can be simply continued by recalling the
    > OpenClinica login URL can really breach the confidence in how the system
    > preserves data integrity.
    > It can be practical when a person has continued control on the computer
    > but it is a real threat for shared use workstations.
    >
    > For these reasons I would really support that OpenClinica logs users out
    > when they close a tab.
    > (frankly speaking I thought it was already so. I have made a test and
    > the fact that OpenClinica opens up again without asking the credentials
    > is a little "surprising")
    >
    > Best regards,
    > Armando
    >
    >
    >
  • bbaumannbbaumann Posts: 105 admin
    It is interesting to note that I have tested this on several financial institution websites, and they all behave the same way OpenClinica does...
    On Mon, Sep 24, 2012 at 3:06 AM, Bertuzzi, Armando [Nervianoms] wrote:
    Hi all,
    considering that in a Hospital environment a workstation is often used by different persons, I think that the possibility that an OpenClinica user session can be continued by another person after the OpenClinica tab has been closed (and not the browser) is really critical to preserve controlled access to the data and for the attributability of actions performed in the system (e.g. entry of data, signing events).

    It is common sense that closing a tab in the browser actually ends your session with that application.
    The fact that the session can be simply continued by recalling the OpenClinica login URL can really breach the confidence in how the system preserves data integrity.
    It can be practical when a person has continued control on the computer but it is a real threat for shared use workstations.

    For these reasons I would really support that OpenClinica logs users out when they close a tab.
    (frankly speaking I thought it was already so. I have made a test and the fact that OpenClinica opens up again without asking the credentials is a little "surprising")

    Best regards,
    Armando
    Sent: Saturday, September 22, 2012 10:03 PM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Hi Ben,

    I fully agree with Janus and Michael. This would be totally useless and would render OpenClinica useless for most uses we are happy with today. If this would be a configurable choice during study set up, I could live with it, but I certainly do not need it today.

    Best regards

    Krister
    Sent: Thursday, September 20, 2012 8:58 PM
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.
This discussion has been closed.