Disabled accounts still work normally in pkp/pkp-lib
Sep 23rd 2023
Disabled accounts still work normally
Proof of Concept
The account A is logged in and active. Admin suddenly disabled that account, but account A still works normally.
System integrity is not guaranteed. The user has been disabled, will create actions that should not be there. Privacy will be exposed