The information in this article applies to:
Product: Metastorm BPM
Version: 7.x
Issue
- A user logs in to Metastorm BPM with Internet Explorer 7. From another browser tab, Metastorm BPM can be accessed without logging in.
Resolution
This is expected behavior. A session cookie is used to store the user's session. This cookie is valid as long as the browser remains open or until the session has timed out. Opening or closing a tab in the browser has no effect on the session cookie.
The session time out has a default value of 60 minutes unless changed using the administrative procedure Update Time out.xep.
