diff --git a/src/main/java/org/nrg/xnat/security/DisableInactiveUsers.java b/src/main/java/org/nrg/xnat/security/DisableInactiveUsers.java index 6db3c22168cbd557a4a9513b949e779990ddf6a9..7d7e19f20b9700f91c59bead9bacba60e93095f5 100644 --- a/src/main/java/org/nrg/xnat/security/DisableInactiveUsers.java +++ b/src/main/java/org/nrg/xnat/security/DisableInactiveUsers.java @@ -68,7 +68,7 @@ public class DisableInactiveUsers implements Runnable { if (!hasUserBeenModified(u, _inactivityBeforeLockout) && !username.equals("guest")) { u.setEnabled("0"); u.setVerified("0"); - Users.save(u, adminUser, false, EventUtils.newEventInstance(EventUtils.CATEGORY.SIDE_ADMIN, EventUtils.TYPE.PROCESS, "Disabled due to inactivity")); + Users.save(u, u, false, EventUtils.newEventInstance(EventUtils.CATEGORY.SIDE_ADMIN, EventUtils.TYPE.PROCESS, "Disabled due to inactivity")); String expiration = TurbineUtils.getDateTimeFormatter().format(DateUtils.addMilliseconds(GregorianCalendar.getInstance().getTime(), _lockoutDuration)); System.out.println("Locked out " + u.getLogin() + " user account until " + expiration); diff --git a/src/main/java/org/nrg/xnat/security/provider/XnatDatabaseAuthenticationProvider.java b/src/main/java/org/nrg/xnat/security/provider/XnatDatabaseAuthenticationProvider.java index b1bccb8d00808b06b583b1c150090cb1af25273c..3ad7b36ade6addefcff69153cba94673119ed416 100644 --- a/src/main/java/org/nrg/xnat/security/provider/XnatDatabaseAuthenticationProvider.java +++ b/src/main/java/org/nrg/xnat/security/provider/XnatDatabaseAuthenticationProvider.java @@ -135,7 +135,7 @@ public class XnatDatabaseAuthenticationProvider extends DaoAuthenticationProvide String query = "SELECT COUNT(*) AS count " + "FROM xdat_user_history " + "WHERE xdat_user_id=" + xdatUserDetails.getID() + " " + - //"AND change_user=" + xdatUserDetails.getID() + " " + + "AND change_user=" + xdatUserDetails.getID() + " " + "AND change_date = (SELECT MAX(change_date) " + "FROM xdat_user_history " + "WHERE xdat_user_id=" + xdatUserDetails.getID() + " " +