# Rails returning session of another user

**URL:** <https://www.ruby-forum.com/t/rails-returning-session-of-another-user/197047>\
**Category:** Rails\
**Created:** [June 11, 2010, 3:35am UTC](https://www.ruby-forum.com/t/rails-returning-session-of-another-user/197047 "2010-06-11T03:35:42Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ADADAD](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/85e7bf/32.png) [@ADADAD](https://www.ruby-forum.com/u/ADADAD)\
**Post date:** [June 11, 2010, 3:35am UTC](https://www.ruby-forum.com/t/rails-returning-session-of-another-user/197047/1 "2010-06-11T03:35:42Z")

</div>

Running Jruby1.4.0, Rails 2.3.5, Tomcat 5.5, Java 1.6

We are getting reports that when a user logs in they are getting the  
session  
of another user. We are unclear how this could happen. One suspicion  
is a  
potentially non-threadsafe plugin called acts\_as\_audited. has anyone  
encountered this issue before? Any idea how this can happen?

Thanks  
AD