search

jmix-framework / jmix

Jmix framework
https://www.jmix.io
Apache License 2.0
694 stars 124 forks source link

After deleting the tenant, the user with that tenant has access to the application #3864

Open rusiaikinat opened 1 week ago

rusiaikinat commented 1 week ago

Environment

Jmix version: 2.4.0

Steps To Reproduce

1) create an empty project 2) install multitenancy plugin 3) add a tenant 4) add tenant user 5) Delete tenant 6) Log in to the application using the user name of the remote tenant

Current Behavior

After these operations, the tenant user can still log in and work in the application.

Expected Behavior

After these operations, the tenant user cannot log in and work in the application.

knstvk commented 1 week ago

Proposed solution: do not login the user if it has a value in TenantId field bu this tenant does not exist.