Forum GLPI-Project

michelmzs

Member

Registered: 2016-04-29

Posts: 3

Deleted users aren't disconnecteds

After deleted an user account,  if the user remains logged in in this account, he can use any part of the system and create new data.

Last edited by michelmzs (2016-05-02 18:45:29)

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Deleted users aren't disconnecteds

Deleted user account where? In glpi?
Version of glpi used?

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

michelmzs

Member

Registered: 2016-04-29

Posts: 3

Re: Deleted users aren't disconnecteds

In GLPI, I tested with local and LDAP accounts.
Version 0.90.3.

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Deleted users aren't disconnecteds

You don't have reply to my question: where do you deleted user account? and how do you do this?

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

michelmzs

Member

Registered: 2016-04-29

Posts: 3

Re: Deleted users aren't disconnecteds

Sorry,

Created and deleted user in Administration > Users.

Steps to reproduce:

- Create the new user, make login in another browser with him.
- Go back to main browser, with your account and delete the new user.
- The session still alive for him, and he can create new tickets.

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Deleted users aren't disconnecteds

He can create new ticket during the validity of his session.
To avoid it, you must reduce the validity of the session in phps' config

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)