Moved from GitHub ratel/127
Posted by danielmai:
Queries still succeed as the logged in user even after clicking the log out button.
Steps to reproduce:
- Run Dgraph cluster with ACLs enabled.
- Create a user and group with read permissions for a particular predicate.
- Log in as that user.
- Run query for that predicate. The query should be authorized and succeed.
- Log out.
- Run the same query. The query succeeds, but it should fail since no one is logged in.
A “log out” works if I log out and then click the Refresh button of the web browser.