Actions
Bug #23
closedDeleted Users Can Still Authenticate and Access Application
Status:
Closed
Priority:
Normal
Assignee:
-
Description
Users deleted via the Admin Management panel are still able to authenticate and access the application with their existing credentials.
This indicates that user deletion is not properly enforced in the authentication or authorization layer.
Steps to Reproduce
- Login as a Super Admin
- Navigate to:
/pages/adminManagement - Delete an existing user
- Logout
- Attempt to login using the deleted user's credentials
Expected Result
- Deleted users should not be able to log in
- Authentication should fail with an appropriate error
Actual Result
- Deleted user can still log in successfully
- User retains previous privileges
Files
Actions