Root-admin logout from secondary site managment leads to root-admin logout on any session

[amrsot]

Prerequisites

• I have read the contributing guidelines
• I have searched existing issues for duplicates or prior discussions
• I have attempted to reproduce the issue on try.globaleaks.org

What version of GlobaLeaks are you using?

5.0.85

On which distribution/version is GlobaLeaks installed?

Ubuntu 20.04.03 LTS

What browser(s) are you seeing the problem on?

Chrome

What operating system(s) are you seeing the problem on?

Windows

Describe the issue

When you log in as a megaadmin, if you open the configuration of one of the instances in the sites section, when you log out of the site, the megaadmin session is also disconnected (previously, it was maintained, and you could configure another site).
I understand this behavior could be due to the new "Clear-Site-Data" header.

Had you anticipated this behavior of the megaadmin user in this case? Thanks!!!

Proposed solution

Keep the megaadmin user logged in to allow them to perform other tasks on the main tab.

[evilaliv3]

Thank you @amrsot.

I confirm the situation that is as you sai caused by the header clear-site-data.

Proper soultion would involve loading any secondary tenant management via a dedicated domain but this as know has the problem to require the usage of a wildlcard certificate to do somethin like (tenant1.domain.tld, tenant2.domain.tld)

As a short term simple solution i suggest we could avod to us use the clear-site-data header only managed sessions.

I'm preparing a patch that we might issue in a minor release 5.0.86