16000 - Information Delivery Portal session timeout and the browser BACK button causes unintended results

Problem Note 16000: Information Delivery Portal session timeout and the browser BACK button causes unintended results

When using the Information Delivery Portal and a user logs out or is logged out due to the session timeout value, unintended actions can occur with the SASGUEST account.

Once the user is logged out, the SASGUEST user is logged in automatically for public access. If the browser BACK button is selected, the log in operations are available as the guest user. Any write operation to the data can be executed. These operations should only occur if a non-public user is logged into the Portal.

Select the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Information Delivery Portal	64-bit Enabled Solaris	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		Microsoft Windows XP Professional	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		Microsoft Windows 2000 Server	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		Microsoft Windows NT Workstation	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		Microsoft Windows 2000 Professional	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		Microsoft Windows 2000 Advanced Server	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		Microsoft Windows 2000 Datacenter Server	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		64-bit Enabled HP-UX	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4
		64-bit Enabled AIX	2.0	2.0	9.1 TS1M3 SP3	9.1 TS1M3 SP4

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for SAS 9.1.3 (9.1 TS1M3) for this issue is available at:

http://www.sas.com/techsup/download/hotfix/e9_sbcs_prod_list.html#016000

A fix for SAS 9.1.3 (9.1 TS1M3) with Asian Language Support (DBCS) for this issue is available at :

http://www.sas.com/techsup/download/hotfix/e9_dbcs_prod_list.html#016000

Type:	Problem Note
Priority:	high
Topic:	System Administration ==> Servers ==> Portal

Date Modified:	2007-10-25 09:26:09
Date Created:	2005-08-23 10:44:39