User can log into domain that they are not assigned access to in "Domain Access" setting

Created on 27 January 2023, over 1 year ago
Updated 14 February 2023, over 1 year ago

Drupal Version

9.4.9

Domain module version

2.0.x-dev

Expected Behavior

The user is not able to log in.

Actual Behavior

The user is able to log in.

Steps to reproduce

1. Configure any number of domain records
2. Create a new user. Do not select any domain for the setting of the user's edit page.
3. Visit /user/login for any domain that had a domain record configured in step 1
4. Attempt to log in with the new user's username and password

Other notes

I have also noticed that this happens if the user is given access to the wrong domain. For instance, if two domain records are configuredโ€”A and Bโ€”and is checked in the setting of that user's edit page, but is not checked, the user will nonetheless be able to log into both and .

This is my first time using this module, so please forgive me if this is intended behavior and I'm misunderstanding something. I'd be happy to provide any additional information that would help.

๐Ÿ› Bug report
Status

Closed: works as designed

Version

2.0

Component

Miscellaneous

Created by

๐Ÿ‡บ๐Ÿ‡ธUnited States john.karahalis

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024