Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-23971

If a user is removed while logged in, session for that user will throw an exception

    XMLWordPrintable

Details

    Description

      if user that is currently logged in is removed, the session/tab where the user is navigating will throw an exception

      Could not find 'Content' with identifier 'array (
      'id' => '32469',
      'languages' => NULL,
      'versionNo' => NULL,
      )'
      500 Internal Server Error - NotFoundException
      1 linked Exception: NotFoundException 
      

      steps to reproduce
      1) Create a new user: user_001
      2) Open a private window, log into the frontend using a siteaccess in legacy mode with user_001
      3) in the the backend, delete user_001
      4) Go to the logged user_001 session and navigate to any link. You will get the error above.

      note: using a Sf siteaccess, the error is a "403 Forbidden - AccessDeniedHttpException"

      in the documentation, there is a warning that users should not be removed, here:
      https://doc.ez.no/eZ-Publish/User-manual/4.x/Daily-tasks/Managing-users

      however, when user_001 is deleted in admin, the user's browser has no information of the event, and keeps sending session data that the server accepts as valid. this is not the same case as access to an object created by a removed user (such as an old comment)

      Attachments

        Activity

          People

            Unassigned Unassigned
            paulo.bras-obsolete@ez.no Paulo Bras (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 day, 27 minutes
                1d 27m