Actions
User Story #291
open
Epic #49: Implement user, groups and permissions management
Feature #269: Access decision and enforcement
As an administrator, I want a change to access to take effect straight away, so that revoking someone actually stops them
User Story #291:
As an administrator, I want a change to access to take effect straight away, so that revoking someone actually stops them
Start date:
Due date:
% Done:
0%
Estimated time:
Description
If access were decided once at sign-in, revoking it would do nothing until the person signed out — which is exactly when it matters least.
Acceptance criteria
- Editing a role, changing a grant or changing group membership affects the next request that person makes
- Nothing about what a person may do is carried in their session
- Suspending an account stops it immediately, including sessions already open
- Access checks stay fast enough that they are not noticeable on ordinary pages
Rejection reason
Superseded by the rewritten epic #49
Updated by
Actions