17.1 -> 17.2 - lost option to log in as another user

[MarcinG]

Hi,

I have a repository with a security enabled on it.  There used to be an option to log in as another user (switch users) in 17.1.  After replacing it with 17.2 , this option seems to be gone.  Could anyone advise how to get this option back ?

Greetings,
Marcin

[Geert Bellekens]

That is one of the security updates from 17.2

I don't think there is a workaround currently.

Geert

[MarcinG]

Thank you Geert.  Looks like a bug, rather than a part of security update.  Will wait for the fix then, hopefully not too long.

Many thanks
Marcin

[Geert Bellekens]

Thank you Geert.  Looks like a bug, rather than a part of security update.  Will wait for the fix then, hopefully not too long.

Many thanks
Marcin

I'm pretty sure it was a deliberate removal, but if you want to know for sure, and if they intend to bring it back, send in a bug report.

Geert

[ppeeters]

Hi,
I had the same question : https://sparxsystems.com/forums/smf/index.php/topic,49291.0.html
I did send a "bug" report and, as expected, the answer is that  it is a deliberate decision to improve the overall security and prevent session-hopping.
I understand their decision but I would have expected some improved role-based permission management.
I mentionned some workaround (externally managed dual account, OIDC only authentication) but these are still workarounds that may not work for everybody...