Details
-
Type:
Bug
-
Status:
Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 1.1-alpha-1
-
Fix Version/s: 1.1-alpha-1
-
Component/s: Web interface
-
Labels:None
-
Complexity:Intermediate
-
Number of attachments :
Description
Not sure if we use last login at all, but at least login attempts is needed to block the account after some wrong logins.
i think its because the event happens in Acegi world and doesn't reach UserManager, we probably need the Event listener for acegi I mentioned in another issue
Issue Links
- duplicates
-
CONTINUUM-796
Disable account on login failures
-
Added the acegi hooks necesary