Skip to main content
Planview Customer Success Center

It is possible by copying/pasting a Changepoint URL to transfer a session to a different user v2014

It is possible to copy a Changepoint URL and then mail it to a different user on a different PC. There, the user can paste the URL into a web browser and take over the session. This is considered a security breach in our organization.

 


To avoid this, please go to Changepoint system management, general setup, session security and enable the option 'Enhanced Session Management'. When this is enabled, Changes uses a cookie for session security and it will not be possible to transfer a session by copying/pasting the URL.

Note: The option 'enhanced session management' is not compatible with Changepoint Report Designer report scheduling.