Fixed Disabled accounts can still access ACP

Kirby

Well-known member
Affected version
2.2.15
If an account is set to state Disabled the account can't do anything on public pages (moderating, etc.) - but the account can still access ACP.

This is somewhat unexpected and IMHO inconsistent as there is no indication that the user is still able to access ACP -
trying to ban an admin on the other hand does give an error.

This should be changed so that either
a) Accounts in state Disabled (and Rejected) can't use ACP (Preferred)
or
b) Admin accounts can't be set to state Disabled (and Rejected), just like they can't be banned
 
Last edited:
Thank you for reporting this issue, it has now been resolved. We are aiming to include any changes that have been made in a future XF release (2.2.16).

Change log:
Prevent disabled accounts from using the admin control panel
There may be a delay before changes are rolled out to the XenForo Community.
 
Back
Top Bottom