@@ -, +, @@ --- C4/Auth.pm | 2 ++ 1 file changed, 2 insertions(+) --- a/C4/Auth.pm +++ a/C4/Auth.pm @@ -1711,6 +1711,8 @@ sub check_cookie_auth { } else { return ( "anon", $session ); } + # If here user was logged in, but doesn't have correct permissions + # could be an 'else' at `if($flags) return "ok"` , but left here to catch any errors $session->delete(); $session->flush; C4::Context->_unset_userenv($sessionID); --