Privilege Expiration should block login to Staff Client

[Carrie Cleary]

Even when a staff account has a privilege expiration date in the long ago past, they can still login to the staff web client.
It would be great if the expiration date prevented login to the staff client so that libraries were required to review staff accounts on a regular basis.

[Jonathan Moore (jonathanmoore)]

Yes! Please do so.

[Terran McCanna (tmccanna)]

+1

[Jason Stephenson (jstephenson)]

My understanding, and I could very well be mistaken, is that the current behavior was an original requirement of Evergreen.

Also, preventing login on expired staff accounts will not work so well for some sites that use generic logins. This should be optional, perhaps controlled by yet-another-org-unit-setting.

[Mike Rylander (mrylander)]

Jason, I believe you understand correctly. "Staff accounts don't expire" was an original desire at PINES, due to frustration with staff accounts "randomly" getting locked in previous ILS' IIRC.

An YAOUS or even a global flag would make sense to me.

[Anna Goben (agoben)]

I would love for this to be at least a setting. We have definitely had trouble getting some libraries to be diligent about clearing out old staff accounts, and it's a significant security risk.

[Meg Stroup (mstroup)]

+1 to what Anna said: it can be difficult to stay on top of old staff accounts.