{"action":"opened","issue":{"url":"https://api.github.com/repos/thegooddata/webapp/issues/134","labels_url":"https://api.github.com/repos/thegooddata/webapp/issues/134/labels{/name}","comments_url":"https://api.github.com/repos/thegooddata/webapp/issues/134/comments","events_url":"https://api.github.com/repos/thegooddata/webapp/issues/134/events","html_url":"https://github.com/thegooddata/webapp/issues/134","id":59342166,"number":134,"title":"Existing user sessions not deleted when user account is blocked.","user":{"login":"josereyero","id":93482,"avatar_url":"https://avatars.githubusercontent.com/u/93482?v=3","gravatar_id":"","url":"https://api.github.com/users/josereyero","html_url":"https://github.com/josereyero","followers_url":"https://api.github.com/users/josereyero/followers","following_url":"https://api.github.com/users/josereyero/following{/other_user}","gists_url":"https://api.github.com/users/josereyero/gists{/gist_id}","starred_url":"https://api.github.com/users/josereyero/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/josereyero/subscriptions","organizations_url":"https://api.github.com/users/josereyero/orgs","repos_url":"https://api.github.com/users/josereyero/repos","events_url":"https://api.github.com/users/josereyero/events{/privacy}","received_events_url":"https://api.github.com/users/josereyero/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"atrandafir","id":3097251,"avatar_url":"https://avatars.githubusercontent.com/u/3097251?v=3","gravatar_id":"","url":"https://api.github.com/users/atrandafir","html_url":"https://github.com/atrandafir","followers_url":"https://api.github.com/users/atrandafir/followers","following_url":"https://api.github.com/users/atrandafir/following{/other_user}","gists_url":"https://api.github.com/users/atrandafir/gists{/gist_id}","starred_url":"https://api.github.com/users/atrandafir/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/atrandafir/subscriptions","organizations_url":"https://api.github.com/users/atrandafir/orgs","repos_url":"https://api.github.com/users/atrandafir/repos","events_url":"https://api.github.com/users/atrandafir/events{/privacy}","received_events_url":"https://api.github.com/users/atrandafir/received_events","type":"User","site_admin":false},"milestone":null,"comments":0,"created_at":"2015-02-28T13:41:41Z","updated_at":"2015-02-28T13:41:41Z","closed_at":null,"body":"When a user account is blocked/disabled, existing user sessions are not deleted, thus the user can still access the site provided he/she was previously logged in.\r\n\r\nI've fixed this on the 'collaborate' side by checking account status for every page load, but I guess this should be fixed in the webapp too."}}