Erase sessionInfo if spoofed identity is not allowed (#1664)

This commit is contained in:
Christophe Maudoux 2019-03-09 13:18:39 +01:00
parent dfd286c9fa
commit 049df70e53

View File

@ -156,7 +156,7 @@ sub _userDatas {
'Impersonation requested for an unvalid user ('
. $req->{user}
. ")" );
$req->sessionInfo = {};
$self->logger->debug('Identity not authorized');
return $req->error(PE_BADCREDENTIALS);
}