Reset session on login/logout (#4248).

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3080 e93f8b46-1217-0410-a6f0-8f06a7374b81
2009-11-21 10:02:39 +00:00
parent 4e3202d2a2
commit 0485d3a524
2 changed files with 19 additions and 1 deletions
@@ -61,12 +61,12 @@ class ApplicationController < ActionController::Base
  
  # Sets the logged in user
  def logged_user=(user)
+    reset_session
    if user && user.is_a?(User)
      User.current = user
      session[:user_id] = user.id
    else
      User.current = User.anonymous
-      session[:user_id] = nil
    end
  end