# 当你禁用严格注销时，新标签页仍然可以执行无效的管理员操作

**URL:** <https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942>\
**Category:** Support\
**Created:** [2015年三月3日 22:46 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942 "2015-03-03T22:46:36Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![strager](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@strager](https://meta.discourse.org/u/strager)\
**Post date:** [2015年三月3日 22:46 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/1 "2015-03-03T22:46:36Z")

</div>

**Steps to reproduce:**

1.) Log in as an administrator  
2.) Open a new tab to any post  
3.) Return to the original tab and log out  
4.) Return to the second tab and attempt to do things such as Pinning or closing the topic  
5.) Observe the results

**Actual Results:**

Logging out does not prevent the administrative actions from appearing to occur in that tab. While these actions are ineffective (pinning a topic doesn’t actually pin it) it appears to the user that the changes are being made - this could lead to confusion if an admin logs out with one tab and returns at a later point to the tab where they are logged in - especially as you are able to change pages and still remain in this state.

**Expected Results:**

After logging out the sessions for other tabs should become invalid and any actions taken that a regular user cannot perform should result in an error.

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年三月3日 22:50 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/2 "2015-03-03T22:50:00Z")

</div>

This sounds really odd, if you log out we pop this up

 ![](https://global.discourse-cdn.com/meta/original/3X/5/5/5565fd2e8225ae46f33272bb1632babc60938278.png) 

Just tested and it seems to be work fine.

---

<div class="post-metadata">

**Author:** ![strager](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@strager](https://meta.discourse.org/u/strager)\
**Post date:** [2015年三月3日 23:02 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/3 "2015-03-03T23:02:14Z")

</div>

It works fine with the ORIGINAL tab - it’s the “new” tab where the issue occurs.

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年三月3日 23:05 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/4 "2015-03-03T23:05:13Z")

</div>

That is what is confusing me, that message “You were logged out” shows up everywhere, no matter on which tab you log out from.

---

<div class="post-metadata">

**Author:** ![strager](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@strager](https://meta.discourse.org/u/strager)\
**Post date:** [2015年三月4日 00:42 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/5 "2015-03-04T00:42:27Z")

</div>

odd - I don’t see that on any other tab… running on the latest version of Chrome if that matters here at all…

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年三月4日 01:53 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/6 "2015-03-04T01:53:22Z")

</div>

Super odd, just impersonated your account and logged out

 ![](https://global.discourse-cdn.com/meta/original/3X/0/9/0902b65e5e08a2be7931e54ee369c75258f96d18.png) 

Can you try a different browser? Can you confirm you don’t have any plugins? Does this happen on your home computer as well (perhaps you are shutting down long polling somehow)?

---

<div class="post-metadata">

**Author:** ![strager](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@strager](https://meta.discourse.org/u/strager)\
**Post date:** [2015年三月4日 01:57 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/7 "2015-03-04T01:57:41Z")

</div>

I have some late-night testing (DNS changes - what fun!) scheduled for tonight - I’ll try it again on my home system at that time and let you know.

We do have a few basic plugins installed, but they are pretty standard ones - new relic, sidebar, one or two others… it’s very possible that something with our instance is causing it. Leave this topic open (you guys can be a bit aggressive about closing them lol) for a day or two at least so I can get some more info 😄

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年三月4日 01:59 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/8 "2015-03-04T01:59:43Z")

</div>

Kind of impossible to sort out a bug with no steps to repro 🙂

reclassifying this to support for now

---

<div class="post-metadata">

**Author:** ![kensims](https://avatars.discourse-cdn.com/v4/letter/k/97f17d/32.png) [@kensims](https://meta.discourse.org/u/kensims)\
**Post date:** [2015年三月4日 05:10 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/9 "2015-03-04T05:10:01Z")

</div>

It appears that this happens only if “log out strict” in the Login settings is unchecked.

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年三月4日 05:10 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/10 "2015-03-04T05:10:41Z")

</div>

bingo, yeah … this makes sense .

---

<div class="post-metadata">

**Author:** ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)\
**Post date:** [2024年六月8日 12:46 UTC](https://meta.discourse.org/t/when-you-disable-strict-logout-new-tabs-still-can-perform-ineffective-administrative-actions/25942/11 "2024-06-08T12:46:10Z")

</div>

此主题已在 3384 天后自动关闭。不再允许回复。
