Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

User can register without logoff from the system #379

Closed
jarekrzdbk opened this issue Aug 9, 2016 · 1 comment
Closed

User can register without logoff from the system #379

jarekrzdbk opened this issue Aug 9, 2016 · 1 comment
Assignees
@jarekrzdbk
Labels
bug

Comments

@jarekrzdbk
Copy link
Contributor

Case:

  1. Login to system
  2. Go to dev.fr8.co with using this url "/DockyardAccount/Register"
  3. Register with another account.
    Result:
    User can register to system without log off from the system.
@jarekrzdbk jarekrzdbk added the bug label Aug 9, 2016
@jarekrzdbk jarekrzdbk self-assigned this Aug 9, 2016
@jarekrzdbk
Copy link
Contributor Author

not only /Register, but all /DockyardAccount urls accessible for logged user.
to prevent this we should create Action Filter :RedirecLogedUserAttribute that would redirect logged users, and add this filter to DockyardAccountController.

@jarekrzdbk jarekrzdbk reopened this Aug 9, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jarekrzdbk jarekrzdbk

Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jarekrzdbk