Comment 7 for bug 1166670

Revision history for this message
Thierry Carrez (ttx) wrote : Re: Deleted user can still create instances

Still trying to make up my mind whether to consider this a "vulnerability".

I suspect those tokens end up being denied after their validity period ? Is there a way for the admin to disable the tokens manually ?

Is that only affecting Folsom ?