-
Notifications
You must be signed in to change notification settings - Fork 0
Description
When a user is added via accounts and you select Login permission via app settings, user is able to login even if their role is not allowed to login settings in app.
Example, add a user and assign role as registered users. Core app does not have registered users permission to login, still the user is able to login.
######## Issue imported from Gitea ########
Details
Gitea Issue ID : 517
State : open
Created : 2024-04-12T22:28:07+10:00
Issue Description
When a user is added via accounts and you select Login permission via app settings, user is able to login even if their role is not allowed to login settings in app.
Example, add a user and assign role as registered users. Core app does not have registered users permission to login, still the user is able to login.
Timeline
Label : Added P2 on 2024-04-12T22:28:07+10:00.
Label : Added Securitybug on 2024-04-12T22:28:07+10:00.