oqtane.framework
oqtane.framework copied to clipboard
[BUG] - When a user has a role that has a expiry date that is not Valid (i.e. in the past) it is still authorised for that role
Oqtane Info
Version - 5.1.2 (dev Branch) Render Mode - Static Interactivity - Server Database - SQL Server
Describe the bug
- When a user has a role that has a expiry date that is not Valid (i.e. in the past) it is still authorised for that role
Expected Behavior
- The user should not be authorised if the user has a role which has expired
Steps To Reproduce
- Add a role and set the expiry date to yesterday
- Add that role to a user
- Add HTML module and set its permission to view and edit to that specific role
- Log in as the user assigned that role, and you will still be able to view and edit the HTML Module