[Koha-bugs] [Bug 26912] Expired staff accounts can still log in to Koha staff intranet, SIP, API, etc.

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26912

--- Comment #12 from David Cook <dcook at prosentient.com.au> ---
If I recall correctly, locally we block SIP logins if the user is expired.

So I think this could actually just be handled during an authorization step. 

We just need to add some business logic alongside the account lockout feature I
imagine.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.