user with status "guest" can still silently log in #1191

Closed
opened 2026-10-05 00:35:28 +02:00 by adam · 0 comments
Owner

The "guest" user status is supposed to be equivalent to "deactivated" user. Meaning the user still exists in the users list, but can't be used anymore.

Actually, I'm able to "silently" log in. The UI does "as if" I was not logged in, but actually I am (checked in the sessions table).

When trying to log in with a "guest" user, Piwigo should simply refuse the connection, as if the password was invalid.

The "guest" user status is supposed to be equivalent to "deactivated" user. Meaning the user still exists in the users list, but can't be used anymore. Actually, I'm able to "silently" log in. The UI does "as if" I was not logged in, but actually I am (checked in the sessions table). When trying to log in with a "guest" user, Piwigo should simply refuse the connection, as if the password was invalid. <!-- github-sync-id:833786370 -->
adam closed this issue 2026-10-05 00:35:28 +02:00
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#1191