Bug 495494 - It's possible to delete a logged-in user with no warnings
Summary: It's possible to delete a logged-in user with no warnings
Status: ASSIGNED
Alias: None
Product: systemsettings
Classification: Applications
Component: kcm_users (show other bugs)
Version: master
Platform: Other Linux
: NOR minor
Target Milestone: ---
Assignee: Plasma Bugs List
URL:
Keywords: usability
Depends on:
Blocks:
 
Reported: 2024-10-28 17:12 UTC by Nate Graham
Modified: 2025-03-14 22:44 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Nate Graham 2024-10-28 17:12:11 UTC 
STEPS TO REPRODUCE
1. System Settings > Users > Create a new user account
2. Kickoff > Leave > Switch User > Log into the new user account
3. Kickoff > Leave > Switch User > Log back into your original user account
4. System Settings > Users > Delete the new user account while it's still logged in

OBSERVED RESULT
There are no warnings or errors; you can delete the account while it's still logged in!

EXPECTED RESULT
At the very least, a warning about this.

ADDITIONAL INFORMATION
If I try to switch user to the still-logged-in-but-not-deleted user account, it fails to accept the password.
Comment 1 Nate Graham 2025-03-14 18:15:02 UTC 
I don't see a thing in AccountsService's DBus interface for this, but maybe we could use get enough data about users on the system from the LoginHistory method. It would probably be easier to parse the output of `users` though.
Comment 2 Bug Janitor Service 2025-03-14 22:44:28 UTC 
A possibly relevant merge request was started @ https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/5320