P. Christeas
66564a93fc
Original description, by Xavier ALT: > The server is using a variable name "_uid_cache" for authentication > caching, but this variable is never clear when user informations change, > that means if we disable a user or change it's password their requests > are still allowed (cached auth check ok). > > This affects OpenERP v5 (server/bin/service/security.py) and OpenERP v6 > (server/bin/addons/base/res/res_users.py, class users). > > The only workaround is to restart the server. > bzr revid: p_christ@hol.gr-20101214162905-716i3ra12xvdtc2l
About OpenERP --------------- OpenERP is a free Enterprise Resource Planning and Customer Relationship Management software. It is mainly developed to meet changing needs. The main functional features are: CRM & SRM, analytic and financial accounting, double-entry stock management, sales and purchases management, tasks automation, help desk, marketing campaign, ... and vertical modules for very specific businesses. Technical features include a distributed server, flexible workflows, an object database, dynamic GUIs, customizable reports, NET-RPC and XML-RPC interfaces, ... For more information, please visit: http://www.openerp.com