- 🇦🇺Australia darvanen Sydney, Australia
As this ticket has had no activity for many years, is for 7.x and Drupal 7 is now out of support I am closing this ticket as outdated.
While creating tests for #2249443: Needs tests → , I ran across what I think is a bug. If a user account has a user specific IP restriction AND there is a global IP restriction, the user must match BOTH restrictions or they won't be allowed to login. Here's a scenario of why I think this is a bug:
A company has an internal network (intranet) pool of 10.0.0.0 that all internal computers are assigned. The companies website is available over the internet and intranet. The company doesn't want users to login from the internet. So a global IP restriction of 10.0.0.0/8 is set. This requires users to be physically at the office to login. The site administrator Alice wants to be able to login and make changes from home. So a user IP restriction of 76.123.43.201/32 to whitelist her home IP Address.
Alice should be allowed to login from home, because she passes the user IP restriction, but currently she will be denied because she failed the global IP restriction.
Is this a valid bug or works as designed?
Closed: outdated
3.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
As this ticket has had no activity for many years, is for 7.x and Drupal 7 is now out of support I am closing this ticket as outdated.