There is no method for retrieving what you want, as others have said. But I have done it using my own code. THese remarks assume you are using a serialisation or storage API which you can easily gain access to. In my case I use MySQL. Here is an outline.

1. Make sure you have the users id or username saved in the session, NOT IN THE COOKIE!.
2. Write something which will check for orphan sessions, those which have expired but not deleted, and delete them.
3. Either:
   • Make sure your code checks the user privileges, which must have been updated somewhere else in the system, each time an access is attempted to a privileged page. or:
   • Store a privileges code in the session (but this should be an unecessary duplicate of info stored elsewhere).
     
     In my case I also store a '_IS_LOGGED_IN' flag in the session so on each page access I can check users status easily. In essence you want the code to check 'is the user logged in' and 'does he have sufficient privilege for this page' as part of the access to each page.

jdtoronto

Yep and thanks. I've changed from Apache::Session::File to Apache::Session::MySQL, and now I can run something like this:

#!/usr/bin/perl

use strict;
use warnings;

use DBI;
use Apache::Session::MySQL;
use Data::Dumper;

my $db_user = 'root';
my $db_pass = '';

my $dbh = DBI->connect('DBI:mysql:sessions', 'root', '');
my $sth = $dbh->prepare('select id from sessions');
$sth->execute();

while (my $arrayref = $sth->fetchrow_arrayref) {
  my $id = $arrayref->[0];
  my %hash;
  tie %hash, 'Apache::Session::MySQL', $id, {
                         DataSource => 'dbi:mysql:sessions',
                         UserName   => $db_user,
                         Password   => $db_pass,
                         LockDataSource => 'dbi:mysql:sessions',
                         LockUserName   => $db_user,
                         LockPassword   => $db_pass
                        };
  print Dumper($hash{$id});
  untie %hash;
}

$sth->finish();
[download]

This is a good step in the right direction, so I think I'm good from here.. It's unfortunate that I need to hack in this ungraceful way, though.