a1dert/lh-tickets-test — Issue #369: Discharged employees can send holiday request until the logout from the account.
Author: a1dert
Created: 2011-11-30 12:09:24+00:00
State: open
Labels: concurrency

Imported from lighthouse. Original ticket at: http://redtape.lighthouseapp.com/projects/59696/tickets/107. Created by Adina Moldovan - 2010-11-22T12:34:05Z

Steps to reproduce:
1. On 1 browser login as the employee to be discharged
2. On a different browser login as admin
3. As admin, discharge the employee
4. As employee, post a new holiday request

Expected result: Once the employee has been discharged, his/her session should expire to prevent any actions in the application
Actual result: The employee can use the application until (s)he logs out, so the employees can send holiday requests and view approvals..after they've been discharged.

This may not be a big issue for the functionality we have now, but later on, when additional features will be added, this may become a real risk. For now it's a P4 item.