# Logged In As Deleted User **URL:** \ **Category:** Ignition\ **Created:** [February 8, 2010, 8:02pm UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514 "2010-02-08T20:02:16Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![bryan\_cook](https://avatars.discourse-cdn.com/v4/letter/b/a8b319/32.png) [@bryan\_cook](https://forum.inductiveautomation.com/u/bryan_cook)\ **Post date:** [February 8, 2010, 8:02pm UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514/1 "2010-02-08T20:02:16Z")
Small item … I’ll give an example scenario … If you’re logged in as admin and delete the admin account, you’ll still be logged into the admin account, (even though you just deleted it). After doing so, I will still able to continue making changes and functioning normally under the admin account. I’m using Ignition 7.0.0.4408 under Windows Server 2003. ---
**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\ **Post date:** [February 8, 2010, 8:15pm UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514/2 "2010-02-08T20:15:18Z")
Yes, I suppose that is true. Our authentication profiles don’t really have any sort of callback mechanism to notify Ignition of when a user has been deleted. One thing I have seen customers do is to use the inactivity timer to log a user out or to switch the user to a lesser-priviledged user. This can help, although doesn’t really get directly at the issue you brought up. I guess we could start polling the authentication profile while a user is logged-in to make sure that a user’s credentials are still valid…not a bad idea. ---
**Author:** ![bryan\_cook](https://avatars.discourse-cdn.com/v4/letter/b/a8b319/32.png) [@bryan\_cook](https://forum.inductiveautomation.com/u/bryan_cook)\ **Post date:** [February 8, 2010, 8:46pm UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514/3 "2010-02-08T20:46:59Z")
If you mean polling at timed intervals, I wouldn’t think that’d be necessary … Couldn’t you just validate the user upon each interaction, (i.e. each HTTP GET/POST) … ? ---
**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\ **Post date:** [February 8, 2010, 8:50pm UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514/4 "2010-02-08T20:50:29Z")
That would be horrendously slow. You’re probably using an internal authentication profile so you might not see any sort of delay, but use an Active Directory profile and you’ll realize that thats not a very good idea. ---
**Author:** ![bryan\_cook](https://avatars.discourse-cdn.com/v4/letter/b/a8b319/32.png) [@bryan\_cook](https://forum.inductiveautomation.com/u/bryan_cook)\ **Post date:** [February 8, 2010, 8:58pm UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514/5 "2010-02-08T20:58:13Z")
Indeed I am! Couldn’t you use cookies or other methods of authentication revolving around the HTTP protocol? Regardless, I’m sure you’ll have a stroke of genius and figure something out! ---
**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\ **Post date:** [February 8, 2010, 10:08pm UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514/6 "2010-02-08T22:08:52Z")
Yeah, we’ll work something out… I’m just saying - we can’t go ping the auth profile every http request (the client generates about 5/second) ---
**Author:** ![bryan\_cook](https://avatars.discourse-cdn.com/v4/letter/b/a8b319/32.png) [@bryan\_cook](https://forum.inductiveautomation.com/u/bryan_cook)\ **Post date:** [February 9, 2010, 1:56am UTC](https://forum.inductiveautomation.com/t/logged-in-as-deleted-user/1514/7 "2010-02-09T01:56:28Z")
Ah, I see … I was only thinking within the realm of Gateway’s web interface … I haven’t even dug into the various modules!