I wish to provide my clients with a rapid way to switch between current users from within a solution. Currently, their only option is to perform an application.logout(), and restart the solution. This takes a long time and is not very efficient. Instead, I would like to leave the current solution loaded, switch to new credentials, and refresh the current form based on the new login. This would substantially increase the efficiency of this procedure. The current time it takes to login a new user is not acceptable to my clients.
The security functions seem to only be targeted at finding and managing user names and groups. I can not find any functions about managing the current sessions.
I would prefer to just plain have access to the session information at a lower level. Then I could implement relogin, logout a user on a timeout, and all kinds of other things. Right now, I can basically do nothing with user management. I could entirely ditch the servoy login process, but then I would also have to implement the tracking from scratch, db access rules from scratch, etc. At that point, I might as well just not use Servoy and develop it in straight Java with a few SQL class libraries. I would much rather stay in the Servoy framework and take advantage of these features.
Servoy needs to provide these kinds of features. I can see many issues where I am going to need more security than simply user name/password. I can see wanting to use biometrics, certificates, and other such creatures before I even get to the servoy stuff. If I had complete session control to their object underneath the covers, I could implement all of this.
The methods have to be there already, they just need to be exposed. Heck, I would even just be happy with a plugin or inheritance type scheme for these major internal modules…