Disabled accounts can still access ACP

Kirby

Well-known member
Affected version
2.2.15
If an account is set to state Disabled the account can't do anything on public pages (moderating, etc.) - but the account can still access ACP.

This is somewhat unexpected and IMHO inconsistent as there is no indication that the user is still able to access ACP -
trying to ban an admin on the other hand does give an error.

This should be changed so that either
a) Accounts in state Disabled (and Rejected) can't use ACP (Preferred)
or
b) Admin accounts can't be set to state Disabled (and Rejected), just like they can't be banned
 
Last edited:
Top Bottom