Browse files

Issue 1792: clear CWebUser access cache on logout

Closes issue #1792 "Control Access still persists after logout".

CWebUser::checkAccess() uses an internal cache that wasn't emptied on
logout. This created wrong access permissions when 2 identities were
used in a single application run.
  • Loading branch information...
François Gannaz
François Gannaz committed Dec 6, 2012
1 parent 0c3940a commit e45af0fba03e02ddce949760ba1d1208b167afa4
Showing with 2 additions and 0 deletions.
  1. +1 −0 CHANGELOG
  2. +1 −0 framework/web/auth/CWebUser.php
@@ -54,6 +54,7 @@ Version 1.1.13 work in progress
- Bug #1676: Fixed listData() grouping when no group was specified (mdomba)
- Bug #1716: Fixed CCodeModel::pluralize() and CConsoleCommand::pluralize() so it doesn't force lowercase the first letter in any words (nsanden)
- Bug #1726: Fixed the error Undefined variable: json in CJSON.php when json_decode function did not exist (heyhoo)
+- Bug #1792: Fixed persistent access permissions when two identities were used in a single application run. (jhenriquemc, François Gannaz)
- Bug: Table schema is refreshed on Gii model generation when schemaCachingDuration is used (SonkoDmitry)
- Bug: CDbCommand::setFetchMode wasn't accepting additional arguments needed for PDO::FETCH_CLASS (samdark)
- Bug: CCaptchaAction::validate check wasn't working properly in some cases (samdark, Qiang)
@@ -266,6 +266,7 @@ public function logout($destroySession=true)
+ $this->_access=array();

0 comments on commit e45af0f

Please sign in to comment.