Edgewall Software
Modify ↓

Ticket #7817 (closed defect: worksforme)

Opened 3 years ago

Last modified 3 years ago

Session table gets not cleaned up after user is deleted

Reported by: Florian Leeber <florian.leeber@…> Owned by:
Priority: normal Milestone:
Component: admin/web Version: 0.11.1
Severity: normal Keywords:
Cc:
Release Notes:
API Changes:

Description

When a user is deleted from the system via the web interface, the session table still contains the corresponding records. If a new user registers the same name, (s)he will get the session data from the old user. This is also unaffected by session expiry. Tried this with a user deleted a month ago.

Attachments

Change History

comment:1 Changed 3 years ago by ebray

Trac by itself has no web interface that has anything to do with deleting users. Are you using the ​AccountManagerPlugin? Even so, that should delete rows from the session and session_attribute tables when a user is deleted.

comment:2 Changed 3 years ago by Florian Leeber <florian.leeber@…>

  • Resolution set to worksforme
  • Status changed from new to closed

Ok it was not reproducible again. Yes it was AccountManagerPlugin?, but is unsure how this was happening. Close it.

View ↑

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
to The owner will be changed from (none). Next status will be 'closed'
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.