OpenStack Security Notes

  1. Bug #1434034
  2. Comment #41

Comment 41 for bug 1434034

Revision history for this message
Morgan Fainberg (mdrnstm) wrote : Re: Even if the user is disabled, can use the last token is validated

Also you can end up with SSO sessions that need to timeout after access is disabled. Depending on cookie/impl.