views:

23

answers:

2

We have implemented Application_Idle event in our application. This works great, and users are promptly asked to enter the password if the session is idle for about 20 minutes.

However, if there is a message-box open or a File Dialogue open to Save/Open the file. Application_Idle never fires. Even if we leave the application idle overnight.

This is a big of a security concern. Any ideas will be appreciated.

A: 

Check this article: http://www.codeproject.com/KB/miscctrl/Application_Idle.aspx

VinayC
Vinay - Thanks for your comments, we implemented the code shown in the link above, but when time-out occurs, the message (or the file-dowlog box) is still shown (and not hidden). Also the time-out does fire whe the focus is within file-dialog or on message box for 20 minutes (20 minutes is the default timeout).Any clue about that?
Anand CSSI
Anand, not sure what's exactly is the issue. You get time-out even if dialog/message box is open - that was the requirement - right? Or are you saying that you get time-out even when you are active on dialog box?
VinayC
A: 

Instead of the idle event use a timer that will lock the application after a configurable timeout. Needless to say, the timer needs to be reset, when the user is interacting with the application.

0xA3
Thank you 0xA3. Your name sounds as if you are a Robot :)
Anand CSSI