Deleted user can connect to any PC until log out from client.

[GusevVictor]

Dear @eltorio could you please fix problem, below?

After delete or inactive a user, it still possible to connect to any machines until logout from Rustdesk client. Neither restart docker nor delete user from web UI helps. Only logout from desktop client.

docker tag v1.1.99-47
client version 1.3.5

[aeltorio]

Hi @GusevVictor,

Thank you for reporting this issue.

Could you please provide the precise steps to reproduce it? This will help me investigate and resolve the problem more efficiently.

Best regards,
Ronan

[GusevVictor]

Hi @GusevVictor,

Thank you for reporting this issue.

Could you please provide the precise steps to reproduce it? This will help me investigate and resolve the problem more efficiently.

Best regards, Ronan

Hi @aeltorio

It's pretty easy to reproduce that bug:

1. add a user by web admin
2. login by that user into desktop client rustdesk
3. connect to any PC - ID+pass
4. del user from web admin
5. you will see that you still login in desktop rustdesk and you still have ability to connect that machine witch you have added before.

I think that there is some user session in web console or api even you just delete user.

If logout from rustdesk desktop client, you can't login again and connect to any host. - That is good behavior. But to achieve that you need manual logout from desktop client. That is not good if you have a user which is no to belong your team for any reason but until logout that user will have possibility to connect any device.