IEnterpriseSession.logoff does not kill the web session

Question

Hi,
i can reproduce the following problem in my application also with the
BusinessObjects Enterprise Java SDK Sample JSP Application.
- start the application
- select Schedule And View Web Intelligence Documents
- Login with user A
- View a Webi Report
- Logoff
- select Schedule And View Web Intelligence Documents
- Login with user B
- View the same Webi Report
The second call of the Webi Report with openDocument.jsp will takeover the
web session of the first call
and create the report with user A.
Only closing the whole Internet Explorer helps.
So my assumption is that IEnterpriseSession.logoff kills only the enterprise
session and not the web session.
Any help?
regards
Gordon

Answer 1

Hi, Gordon,
You are correct in that IEnterpriseSession.logoff kills only the enterprise session and not the web session.
When using openDocument.jsp, the only thing in the URL that changes between calls are the parameters (everything after openDocument.jsp).  Because of this, the browser sees it as a cache hit and re-uses the credentials it already has.  The only way to get it to use different credentials is to exit the browser and reload it.  Opening new windows from the current browser isn't good enough.
There's an SAP Knowledge Base Article about this:
[1384047 - OpenDoc Is Not Using the Correct Logon Token|https://service.sap.com/sap/support/notes/1384047]
It's a little involved, but basically it says that this is expected behavior and that the only way around it is to change your code to use the Enterprise SDK instead of openDocument and to manage the logon tokens yourself.
Hope this helps.
Bryan