webnotes/erpnext — Issue #210: Urgent Security Flaw: When we disable a USER then the user is able to continue with the Session
Author: adityaduggal
Created: 2012-01-12 06:39:07+00:00
State: open

If we disable a user then ideally speaking the user should get logged our instantaneously but on the contrary the current scenario is that if the user is logged in and we disable the user then that user is able to continue with his/her session.

Kindly remove this fallacy from the system as this is a major security flaw?