[rociel]

When login in case tracker: 127.0.0.1:8080/sysworkflow/en/test/tracker/login
using PIN an case numer, then open dynaforms, copy the url and paste in another browser tag,
then i change the url to 127.0.0.1:8080/sysworkflow/en/test/cases/main
the processmaker open using the adminstrator user, then i have the System Administrator rol. Is this a bug?

Easy way:
Open the case using Case number and PIN, then open one dynaform, then clic on back link, open again the dynaform and clic on link "back" again an the system open logged in admin account...

[rociel]

Processmakers versions: 3.3.2, 3.3.3, 3.3.6 and 3.3.10 comunity
and processmaker 3.3.6 enterprice

[rociel]

When you copy the dynaform url in another browser tag and send the request, processmaker create session variable
USER_LOGGED = "00000000000000000000000000000001"
then you are the "admin"