We hope you'll join us for our 4/23 webinar on using data tables to apply reference ranges and AE codes in OC4. For more information and to register, visit https://register.gotowebinar.com/register/2882170018956684555

User Session Auto-Logout Preference: Browser or Tab?

2»

Comments

  • ColinSuttonColinSutton Posts: 30
    Wouldn't both groups be satisfied if users with multiple tabs had a different session on each tab, and a session is closed when a tab is closed?
    Colin
    Sent: Monday, 24 September 2012 6:46 PM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Ok, it's seems like the feature of logging off triggered by a tab close has divided the users here into two groups: pro and con. So to be able to give both group what they want, this feature should be configurable on a *per study* basis.
    As an alternative, perhaps some plugin exists for Firefox, Opera and Internet Explorer that prohibits the use of multi tabs for certain web sites.
    Besides that, I have never seen a shared workstation, in the sense that multiple users use the same logon, except for highly specialised software installations, where a web browser is definitely not part of the software stack. I cannot see why OpenClinica should be considered a "breach in confidence", when the real problem is - IMHO - the breach of common practice?
    Best regards,
    Janus
    Christian Hänsel
    Sent by: [email protected]
    24-09-2012 09:59
    Please respond to
    [email protected]

    To
    [email protected]
    cc

    Subject
    Re: [Users] User Session Auto-Logout Preference: Browser or Tab?

    I fully agree with Amando's point of view. Closing the tab should trigger the logoff (what other intention might someone have, than stop working with OpenClinica).
    Regards,
    Christian
    ------------------------------------------------------------------------
    Dipl.-Inf. Christian Hänsel
    IT / Software Developer
    Tel.: +49-(0)89-5526189-16
    Fax : +49-(0)89-5526189-55
    E-Mail: [email protected]
    ReliaTec GmbH
    Schleissheimer Str. 37
    85748 Garching Germany
    HRB 150060 / AG München
    Gf Thomas Herbig
    http://www.reliatec.de
    =========================================================================
    Am 24.09.2012 09:06, schrieb Bertuzzi, Armando [Nervianoms]:
    Hi all,
    considering that in a Hospital environment a workstation is often used
    by different persons, I think that the possibility that an OpenClinica
    user session can be continued by another person after the OpenClinica
    tab has been closed (and not the browser) is really critical to preserve
    controlled access to the data and for the attributability of actions
    performed in the system (e.g. entry of data, signing events).
    It is common sense that closing a tab in the browser actually ends your
    session with that application.
    The fact that the session can be simply continued by recalling the
    OpenClinica login URL can really breach the confidence in how the system
    preserves data integrity.
    It can be practical when a person has continued control on the computer
    but it is a real threat for shared use workstations.
    For these reasons I would really support that OpenClinica logs users out
    when they close a tab.
    (frankly speaking I thought it was already so. I have made a test and
    the fact that OpenClinica opens up again without asking the credentials
    is a little "surprising")
    Best regards,
    Armando
  • JanusJanus Posts: 260
    Sorry, not me. If I understand you correctly, then opening 10 tabs would
    require me to login 10 times.
    Best regards,
    Janus

    Colin Sutton
    To
    Sent by: "[email protected]"
    [email protected]
    nclinica.org cc

    Subject
    25-09-2012 00:30 Re: [Users] User Session
    Auto-Logout Preference: Browser or
    Tab?
    Please respond to
    [email protected]
    .org



    Wouldn't both groups be satisfied if users with multiple tabs had a
    different session on each tab, and a session is closed when a tab is
    closed?
    Colin
    behalf of Janus Engstrøm [[email protected]]
    Sent: Monday, 24 September 2012 6:46 PM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Ok, it's seems like the feature of logging off triggered by a tab close has
    divided the users here into two groups: pro and con. So to be able to give
    both group what they want, this feature should be configurable on a *per
    study* basis.
    As an alternative, perhaps some plugin exists for Firefox, Opera and
    Internet Explorer that prohibits the use of multi tabs for certain web
    sites.
    Besides that, I have never seen a shared workstation, in the sense that
    multiple users use the same logon, except for highly specialised software
    installations, where a web browser is definitely not part of the software
    stack. I cannot see why OpenClinica should be considered a "breach in
    confidence", when the real problem is - IMHO - the breach of common
    practice?
    Best regards,
    Janus

    Christian Hänsel

    Sent by:
    [email protected] To
    [email protected]
    cc
    24-09-2012 09:59
    Subject
    Re: [Users] User Session
    Please respond to Auto-Logout Preference:
    [email protected] Browser or Tab?







    I fully agree with Amando's point of view. Closing the tab should trigger
    the logoff (what other intention might someone have, than stop working with
    OpenClinica).
    Regards,
    Christian
    ------------------------------------------------------------------------
    Dipl.-Inf. Christian Hänsel
    IT / Software Developer
    Tel.: +49-(0)89-5526189-16
    Fax : +49-(0)89-5526189-55
    E-Mail: [email protected]
    ReliaTec GmbH
    Schleissheimer Str. 37
    85748 Garching Germany
    HRB 150060 / AG München
    Gf Thomas Herbig
    http://www.reliatec.de
    =========================================================================
    Am 24.09.2012 09:06, schrieb Bertuzzi, Armando [Nervianoms]:
    Hi all,
    considering that in a Hospital environment a workstation is often used
    by different persons, I think that the possibility that an OpenClinica
    user session can be continued by another person after the OpenClinica
    tab has been closed (and not the browser) is really critical to preserve
    controlled access to the data and for the attributability of actions
    performed in the system (e.g. entry of data, signing events).
    It is common sense that closing a tab in the browser actually ends your
    session with that application.
    The fact that the session can be simply continued by recalling the
    OpenClinica login URL can really breach the confidence in how the system
    preserves data integrity.
    It can be practical when a person has continued control on the computer
    but it is a real threat for shared use workstations.
    For these reasons I would really support that OpenClinica logs users out
    when they close a tab.
    (frankly speaking I thought it was already so. I have made a test and
    the fact that OpenClinica opens up again without asking the credentials
    is a little "surprising")
    Best regards,
    Armando
  • abertuzziabertuzzi Posts: 51
    Ben,
    I have tested how my bank we site works and, in effect, the session is held live and is continued (!) even if the original tab is closed and a new tab is opened with the bank's URL.
    (frankly speaking this was something I didn't think to occur and ... that I will take into account next time I happen to make access to my bank accont from a workstation that is not mine :-).

    Notwithstanding this, I think there is difference between a bank application and a clinical research application: taking into consideration where, why and how OpenClinica is used, I still support the requirement that (if it is technically feasible) a User's session should be ended if the OpenClinica tab is closed.

    Have a good day,
    Armando
    Sent: Monday, September 24, 2012 3:01 PM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    It is interesting to note that I have tested this on several financial institution websites, and they all behave the same way OpenClinica does...
    On Mon, Sep 24, 2012 at 3:06 AM, Bertuzzi, Armando [Nervianoms] wrote:
    Hi all,
    considering that in a Hospital environment a workstation is often used by different persons, I think that the possibility that an OpenClinica user session can be continued by another person after the OpenClinica tab has been closed (and not the browser) is really critical to preserve controlled access to the data and for the attributability of actions performed in the system (e.g. entry of data, signing events).

    It is common sense that closing a tab in the browser actually ends your session with that application.
    The fact that the session can be simply continued by recalling the OpenClinica login URL can really breach the confidence in how the system preserves data integrity.
    It can be practical when a person has continued control on the computer but it is a real threat for shared use workstations.

    For these reasons I would really support that OpenClinica logs users out when they close a tab.
    (frankly speaking I thought it was already so. I have made a test and the fact that OpenClinica opens up again without asking the credentials is a little "surprising")

    Best regards,
    Armando
    Sent: Saturday, September 22, 2012 10:03 PM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Hi Ben,

    I fully agree with Janus and Michael. This would be totally useless and would render OpenClinica useless for most uses we are happy with today. If this would be a configurable choice during study set up, I could live with it, but I certainly do not need it today.

    Best regards

    Krister
    Sent: Thursday, September 20, 2012 8:58 PM
    To: [email protected]
    Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    Thanks,
    Ben
    -----
    Ben Baumann | OpenClinica, LLC
    Direct phone: 781.547.8422
    [email protected] | www.openclinica.com
    Open source platform for clinical research.
  • mikewormikewor Posts: 35
    Hi Armando, maybe you should change your bank ;)
    Here in South Africa, when you select Internet banking, the site pops a new browser window with menus, buttons, address bar etc disabled. Once you login in this new window, you can only open new tabs from within the banking application (right click on a hotspot and select Open in new tab). Maybe this is one way to sort out the current problem as the user can close the browser window, without affecting any other browser sessions.
    Regards
    Mike
    On 25/09/2012 17:00, Bertuzzi, Armando [Nervianoms] wrote:
    > Ben,
    > I have tested how my bank we site works and, in effect, the session is held live and is continued (!) even if the original tab is closed and a new tab is opened with the bank's URL.
    > (frankly speaking this was something I didn't think to occur and ... that I will take into account next time I happen to make access to my bank accont from a workstation that is not mine :-).
    >
    > Notwithstanding this, I think there is difference between a bank application and a clinical research application: taking into consideration where, why and how OpenClinica is used, I still support the requirement that (if it is technically feasible) a User's session should be ended if the OpenClinica tab is closed.
    >
    > Have a good day,
    > Armando
    >
    >
    >
    >
    >
    > Sent: Monday, September 24, 2012 3:01 PM
    > To: [email protected]
    > Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    >
    > It is interesting to note that I have tested this on several financial institution websites, and they all behave the same way OpenClinica does...
    >
    > On Mon, Sep 24, 2012 at 3:06 AM, Bertuzzi, Armando [Nervianoms] wrote:
    >
    > Hi all,
    > considering that in a Hospital environment a workstation is often used by different persons, I think that the possibility that an OpenClinica user session can be continued by another person after the OpenClinica tab has been closed (and not the browser) is really critical to preserve controlled access to the data and for the attributability of actions performed in the system (e.g. entry of data, signing events).
    >
    > It is common sense that closing a tab in the browser actually ends your session with that application.
    > The fact that the session can be simply continued by recalling the OpenClinica login URL can really breach the confidence in how the system preserves data integrity.
    > It can be practical when a person has continued control on the computer but it is a real threat for shared use workstations.
    >
    > For these reasons I would really support that OpenClinica logs users out when they close a tab.
    > (frankly speaking I thought it was already so. I have made a test and the fact that OpenClinica opens up again without asking the credentials is a little "surprising")
    >
    > Best regards,
    > Armando
    >
    >
    >
    > Sent: Saturday, September 22, 2012 10:03 PM
    > To: [email protected]
    > Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    >
    > Hi Ben,
    >
    >
    >
    > I fully agree with Janus and Michael. This would be totally useless and would render OpenClinica useless for most uses we are happy with today. If this would be a configurable choice during study set up, I could live with it, but I certainly do not need it today.
    >
    >
    >
    > Best regards
    >
    >
    >
    > Krister
    >
    >
    >
    >
    > Sent: Thursday, September 20, 2012 8:58 PM
    > To: [email protected]
    > Subject: [Users] User Session Auto-Logout Preference: Browser or Tab?
    >
    >
    >
    > Would it be useful to have OpenClinica log users out when they close a tab in their browser (as opposed to closing the whole browser)? It seems most web applications log users out when the entire browser closes (including my bank's website).
    >
    > This idea was recently mentioned to me, and I wanted to get a read on what the general usefulness of this might be.
    >
    > Thanks,
    > Ben
    > -----
    >
    > Ben Baumann | OpenClinica, LLC
    > Direct phone: 781.547.8422
    > [email protected] | www.openclinica.com
    >
    > Open source platform for clinical research.
    >
    >
    >
    >
  • LizRLizR Posts: 60
    Hi Ben,
    I don't actually trust my users farther than I can throw them, and I'm not really very big. I truly don't believe that they'll log out, I don't think they'll think of closing their whole browser, and I know they won't lock their screens when they go to lunch. They just won't.
    So, I'm wondering if this could be a role based thing. I'm hearing that it would drive a lot of people crazy for very good reason, but the idea of my clinical data coordinators out there at site closing the tab and then wandering off, leaving their computer open to the whole world causes me to need to drink, and it's too early for that here.
    Liz Robertson
    Director of Data Management and IT
    TRACON Pharmaceuticals, Inc.
    [email protected]
    office: 858.550.0780 ext. 237
    cell: 760.481.5527
  • kristiakkristiak Posts: 1,337 ✭✭✭
    Although belated, I fully support Janus views. If it could be configurable for those few that do not fully adhere to GCP, they should be able to configure it!!

    Regards

    Krister

    PS I have been on vacation!!
    Sent: Monday, September 24, 2012 10:47 AM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?

    Ok, it's seems like the feature of logging off triggered by a tab close has divided the users here into two groups: pro and con. So to be able to give both group what they want, this feature should be configurable on a *per study* basis.
    As an alternative, perhaps some plugin exists for Firefox, Opera and Internet Explorer that prohibits the use of multi tabs for certain web sites.
    Besides that, I have never seen a shared workstation, in the sense that multiple users use the same logon, except for highly specialised software installations, where a web browser is definitely not part of the software stack. I cannot see why OpenClinica should be considered a "breach in confidence", when the real problem is - IMHO - the breach of common practice?
    Best regards,
    Janus
    Christian Hänsel
    Sent by: [email protected]
    24-09-2012 09:59
    Please respond to
    [email protected]

    To

    [email protected]
    cc

    Subject

    Re: [Users] User Session Auto-Logout Preference: Browser or Tab?


    I fully agree with Amando's point of view. Closing the tab should trigger the logoff (what other intention might someone have, than stop working with OpenClinica).
    Regards,
    Christian
    ------------------------------------------------------------------------
    Dipl.-Inf. Christian Hänsel
    IT / Software Developer
    Tel.: +49-(0)89-5526189-16
    Fax : +49-(0)89-5526189-55
    E-Mail: [email protected]
    ReliaTec GmbH
    Schleissheimer Str. 37
    85748 Garching Germany
    HRB 150060 / AG München
    Gf Thomas Herbig
    http://www.reliatec.de
    =========================================================================
    Am 24.09.2012 09:06, schrieb Bertuzzi, Armando [Nervianoms]:
    Hi all,
    considering that in a Hospital environment a workstation is often used
    by different persons, I think that the possibility that an OpenClinica
    user session can be continued by another person after the OpenClinica
    tab has been closed (and not the browser) is really critical to preserve
    controlled access to the data and for the attributability of actions
    performed in the system (e.g. entry of data, signing events).
    It is common sense that closing a tab in the browser actually ends your
    session with that application.
    The fact that the session can be simply continued by recalling the
    OpenClinica login URL can really breach the confidence in how the system
    preserves data integrity.
    It can be practical when a person has continued control on the computer
    but it is a real threat for shared use workstations.
    For these reasons I would really support that OpenClinica logs users out
    when they close a tab.
    (frankly speaking I thought it was already so. I have made a test and
    the fact that OpenClinica opens up again without asking the credentials
    is a little "surprising")
    Best regards,
    Armando
  • kristiakkristiak Posts: 1,337 ✭✭✭
    With a proper login system like we have at all (most) hospitals you must
    insert your ID card to log in. When you remove the card all sessions are
    closed. If you leave for luch without you ID card you can neither eat nor
    get back in!!
    Regards
    Krister
    -----Original Message-----
    On Behalf Of Liz Robertson
    Sent: Tuesday, September 25, 2012 8:12 PM
    To: [email protected]
    Subject: Re: [Users] User Session Auto-Logout Preference: Browser or Tab?
    Hi Ben,
    I don't actually trust my users farther than I can throw them, and I'm not
    really very big. I truly don't believe that they'll log out, I don't think
    they'll think of closing their whole browser, and I know they won't lock
    their screens when they go to lunch. They just won't.
    So, I'm wondering if this could be a role based thing. I'm hearing that it
    would drive a lot of people crazy for very good reason, but the idea of my
    clinical data coordinators out there at site closing the tab and then
    wandering off, leaving their computer open to the whole world causes me to
    need to drink, and it's too early for that here.
    Liz Robertson
    Director of Data Management and IT
    TRACON Pharmaceuticals, Inc.
    [email protected]
    office: 858.550.0780 ext. 237
    cell: 760.481.5527
This discussion has been closed.