[wsas-java-dev] [jira] Commented: (WSAS-156) System should not allow the logged in administrator to delete him self

[Charitha Kankanamge (JIRA)]

    [ http://www.wso2.org/jira/browse/WSAS-156?page=comments#action_13379 ] 
            
Charitha Kankanamge commented on WSAS-156:
------------------------------------------

This is not fixed. Checked in WSAS-2.1 and reopened the bug.

> System should not allow the logged in administrator to delete him self 
> -----------------------------------------------------------------------
>
>                 Key: WSAS-156
>                 URL: http://www.wso2.org/jira/browse/WSAS-156
>             Project: WSO2 WSAS
>          Issue Type: Improvement
>          Components: MgtConsole-UI
>         Environment: WinXP
>            Reporter: Charitha Kankanamge
>         Assigned To: Afkham Azeez
>
> The existing behavior of the management console is, it allows the logged in user to delete him/her self. Once the user logs out from the console, user cannot log in back.
> This is not acceptable in a web application. the logged in user should be restricted to delete himself.
> Steps to reproduce:
> ================
> 1. Add a new admin user
> 2. Log in to the management console as the newly added user 
> 3. Go to Users > User Management page and selects to delete the logged in user
> 4. 'User was deleted successfully' message appears.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://www.wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira