Re: [LiveUser] removeUser & current session => strange behaviour
| From: | Lukas Smith | Date: | Wed, 17 Mar 2004 11:49:09 +0000 |
| Subject: | Re: [LiveUser] removeUser & current session => strange behaviour | ||
| References: | 1 | Groups: | php.pear.general |
| Request: | Send a blank email to pear-general+get-11352@lists.php.net to get a copy of this message | ||
Stephane GULLY wrote:
Hi, I've found a strange behaviour : 1 - The user "toto" exists and is logged 2 - The the LiveUser admin remove the user with : $objRightsAdminAuth->removeUser($auth_user_id); $objRightsAdminPerm->removeUser($perm_user_id); 3 - User toto is still logged ... $liveuser->isLoggedIn() returns true. Maybe I am mistaken but intuitively I thought that when a user is removed, his liveuser session should be destroyed ?No, this is a result of the fact that we currently cache the rights in the session. The way things are now in order to destroy the session of the user you would have to know what session is associated with what user which is not trivial. regards, Lukas Smith smith@backendmedia.com _______________________________ BackendMedia www.backendmedia.com berlin@backendmedia.com Linn Zwoch Smith GbR Pariser Str. 44 D-10707 Berlin Tel +49 30 83 22 50 00 Fax +49 30 83 22 50 07