{"action":"created","issue":{"url":"https://api.github.com/repos/VirtoCommerce/vc-community/issues/245","labels_url":"https://api.github.com/repos/VirtoCommerce/vc-community/issues/245/labels{/name}","comments_url":"https://api.github.com/repos/VirtoCommerce/vc-community/issues/245/comments","events_url":"https://api.github.com/repos/VirtoCommerce/vc-community/issues/245/events","html_url":"https://github.com/VirtoCommerce/vc-community/issues/245","id":128138120,"number":245,"title":"Rejected User(Manager/Customer) is not rejected when logging in","user":{"login":"jvdonk","id":1164988,"avatar_url":"https://avatars.githubusercontent.com/u/1164988?v=3","gravatar_id":"","url":"https://api.github.com/users/jvdonk","html_url":"https://github.com/jvdonk","followers_url":"https://api.github.com/users/jvdonk/followers","following_url":"https://api.github.com/users/jvdonk/following{/other_user}","gists_url":"https://api.github.com/users/jvdonk/gists{/gist_id}","starred_url":"https://api.github.com/users/jvdonk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvdonk/subscriptions","organizations_url":"https://api.github.com/users/jvdonk/orgs","repos_url":"https://api.github.com/users/jvdonk/repos","events_url":"https://api.github.com/users/jvdonk/events{/privacy}","received_events_url":"https://api.github.com/users/jvdonk/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/VirtoCommerce/vc-community/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":{"login":"tatarincev","id":7566324,"avatar_url":"https://avatars.githubusercontent.com/u/7566324?v=3","gravatar_id":"","url":"https://api.github.com/users/tatarincev","html_url":"https://github.com/tatarincev","followers_url":"https://api.github.com/users/tatarincev/followers","following_url":"https://api.github.com/users/tatarincev/following{/other_user}","gists_url":"https://api.github.com/users/tatarincev/gists{/gist_id}","starred_url":"https://api.github.com/users/tatarincev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tatarincev/subscriptions","organizations_url":"https://api.github.com/users/tatarincev/orgs","repos_url":"https://api.github.com/users/tatarincev/repos","events_url":"https://api.github.com/users/tatarincev/events{/privacy}","received_events_url":"https://api.github.com/users/tatarincev/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/VirtoCommerce/vc-community/milestones/13","html_url":"https://github.com/VirtoCommerce/vc-community/milestones/v2.7%20'Needles'","labels_url":"https://api.github.com/repos/VirtoCommerce/vc-community/milestones/13/labels","id":1472423,"number":13,"title":"v2.7 'Needles'","description":"Advanced currency support (virtual currencies, formatting, exchange rates)\r\nAdvanced search in manager (search presets, grouping search result)\r\nTutorial video\r\nReestablish quotes in storefront\r\nWishlists \r\n","creator":{"login":"tatarincev","id":7566324,"avatar_url":"https://avatars.githubusercontent.com/u/7566324?v=3","gravatar_id":"","url":"https://api.github.com/users/tatarincev","html_url":"https://github.com/tatarincev","followers_url":"https://api.github.com/users/tatarincev/followers","following_url":"https://api.github.com/users/tatarincev/following{/other_user}","gists_url":"https://api.github.com/users/tatarincev/gists{/gist_id}","starred_url":"https://api.github.com/users/tatarincev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tatarincev/subscriptions","organizations_url":"https://api.github.com/users/tatarincev/orgs","repos_url":"https://api.github.com/users/tatarincev/repos","events_url":"https://api.github.com/users/tatarincev/events{/privacy}","received_events_url":"https://api.github.com/users/tatarincev/received_events","type":"User","site_admin":false},"open_issues":22,"closed_issues":9,"state":"open","created_at":"2015-12-23T10:20:54Z","updated_at":"2016-01-22T13:06:44Z","due_on":"2016-01-24T22:00:00Z","closed_at":null},"comments":2,"created_at":"2016-01-22T11:34:00Z","updated_at":"2016-01-22T13:09:05Z","closed_at":null,"body":"I added a new user of Account type \"Manager\" which set the State on Approved. When I reject this user, either directly after creating or after the user has logged in successfully at least once, this user is still able to login to the admin.\r\n\r\nIt throws 401 errors when viewing notifications and user or notification settings, but I think the user shouldn't be able to login in the first place?\r\n\r\nLooking at the code there is no check on Account state in the api/platform/security/login API which causes this effect."},"comment":{"url":"https://api.github.com/repos/VirtoCommerce/vc-community/issues/comments/173916149","html_url":"https://github.com/VirtoCommerce/vc-community/issues/245#issuecomment-173916149","issue_url":"https://api.github.com/repos/VirtoCommerce/vc-community/issues/245","id":173916149,"user":{"login":"jvdonk","id":1164988,"avatar_url":"https://avatars.githubusercontent.com/u/1164988?v=3","gravatar_id":"","url":"https://api.github.com/users/jvdonk","html_url":"https://github.com/jvdonk","followers_url":"https://api.github.com/users/jvdonk/followers","following_url":"https://api.github.com/users/jvdonk/following{/other_user}","gists_url":"https://api.github.com/users/jvdonk/gists{/gist_id}","starred_url":"https://api.github.com/users/jvdonk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvdonk/subscriptions","organizations_url":"https://api.github.com/users/jvdonk/orgs","repos_url":"https://api.github.com/users/jvdonk/repos","events_url":"https://api.github.com/users/jvdonk/events{/privacy}","received_events_url":"https://api.github.com/users/jvdonk/received_events","type":"User","site_admin":false},"created_at":"2016-01-22T13:09:05Z","updated_at":"2016-01-22T13:09:05Z","body":"I think it's related to #245, as in that AccountState properties aren't checked as you just explaned in #245. Right?"}}