Disabled user are still able to request for password reset email.

2014-06-16T15:56:42
ID ATLASSIAN:CWD-3961
Type atlassian
Reporter petr.novy
Modified 2015-09-22T08:57:56

Description

h3. Step to Reproduce:

Disable a user (test) in Crowd administration console (make sure that there is no duplicate user)

Request password reset for the disabled user (test)

h3. Expected result No mail will be sent to disabled account.

h3. Observerd Result. The disabled user still receive the password reset email and are able to reset their password.