[Fiware-lab-help] [Account Portal] Trying to delete an organization could lead to cancel the user account

[Álvaro Alonso]

Hi David, 

many thanks for the report. We will take a look. Anyway, we are working in a new release of the IdM in which all this bugs will be fixed. 

BR
-- 
Álvaro

El Nov 4, 2014, a las 6:03 PM, David Muriel escribió:

> When doing our tests on the organizations functionality on the Account Portal, we've found that when trying to delete an organization, the user can end up deleting its own user account instead.  To delete an organization, the user has to edit the organization profile.  At the bottom of this page there is the option to destroy the organization.  But this option depends on the currently active session, that is:
> 
> - If the current session is the organization session, the option is "Destroy organization" and this allows the user to delete that organization, as expected.
> 
> - If the current session is the user session, the option is "Cancel account" and this leads to cancelling the user account whose session is currently active.
> 
> This is a very serious issue, because there are actions when using the Account portal that change the currently active session without user intervention, and the user may not realize the session has changed.  Also, the option to cancel a user account should only be available when editing the user profile, not when editing an organization profile.
> 
> 
> Regards,
> 
> -- 
> David Muriel
> _______________________________________________
> Fiware-lab-help mailing list
> Fiware-lab-help at lists.fi-ware.org
> https://lists.fi-ware.org/listinfo/fiware-lab-help

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-lab-help/attachments/20141105/4f8adb26/attachment.html>