Http Session Management

Maximum Inactive Interval By Group

The capability to set different maximum inactive interval by user group is available in uPortal. You can enable it by creating a MAX_ACTIVE permission for the group with the permission literal value being the number of seconds the HTTP Session should be set for the group. Below is an example of an import file configured for Staff to have a 1 hour inactive interval limit.

Staff MAX_INACTIVE set for 1 hour

<permission-set script="classpath://org/jasig/portal/io/import-permission_set_v3-1.crn">
  <principal-type>org.jasig.portal.groups.IEntityGroup</principal-type>
  <principal>
    <group>Staff</group>
  </principal>
  <activity>MAX_INACTIVE</activity>
  <target permission-type="GRANT">
    <literal>3600</literal>
  </target>
</permission-set>

The current implementation looks for this permission that does not have an owner. The initial import of a particular permission for a group works. However, subsequent imports of different values are not found by the system. Direct database changes are required to change the value. See UP-4599.