Project

General

Profile

Actions
Copy link

Bug #7584

closed

Disable/Delete Account endpoints fail while logged out if their field is not public accessible

Added by krileon almost 5 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Low
Assignee:
krileon
Target version:
6.1.0
Start date:
10 June 2019
Due date:
% Done:

100%

Estimated time:

Description

If the user uses the disable/delete account confirmation link while not logged in and the field is on a tab marked Registered the confirmation will always fail. The field check in the case of a valid token being supplied should only be checking if it's enabled or disabled.

https://www.joomlapolis.com/forum/255-developer-members-support/241011-cb-privacy-plugin-account-deactivation-only-works-if-user-is-logged-in#312727

Actions
Copy link

Also available in: Atom PDF