Restricting impersonation to allow only a single users impersonation at a time
How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!
While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.
Legacy Article
You are viewing an article from our legacy "FastTrack"
publication program, made available for informational purposes. Articles
in this program were published without a requirement for independent
editing or verification and are provided"as is" without
guarantee.
Before using any information from this article, independently verify its
suitability for your situation and project.
Issue
-
An Impersonator should be able to impersonate only one user at a time.
Currently, Liferay supports multiple users to be impersonated, at the same time in the same browser.
We tried to find any properties which can restrict the impersonation to only one user at a time.
-
Can you please advise us on this, or is there any patch available to resolve this issue?
Resolution
- The original and intended design of this feature does not make restrictions like this possible, as the impersonation feature generates a URL for the impersonating user, incorporating details of the impersonated user.
- While the current system doesn't offer a direct solution to modify the core functionality, we suggest implementing a practical measure. Consider restricting the number of users authorized to perform impersonations. This approach not only streamlines user management but also simplifies log tracking, ensuring better control and security.
Did this article resolve your issue ?