A bug?

[sunny]

Jason et al,
I picked one of my level 1 test members who canceled his membership two months ago (during my testing). This is clearly verifiable in the Paypal sandbox. Then, I went to the login page of s2member. I was not able to login with that user's login and pass. This is correct functioning.

But then I acted like (as that user) I had lost my password. Then, I clicked on the 'forgot password' link; when the email was asked I gave that user's email. Then, this user received an email asking for confirmation. When confirmed, a new password was sent. When I entered the new pass, all pages were available to level 1 members were available to this member.

Can this be a bug? Unfortunately, due to an unknown problem my s2member logs are not kept. This may be because I use capistrono for deployment and the full path name changes after each deployment. But you may be able to verify it in other ways.

Thanks

[sunny]

for this reason, I am choosing account deletion over demotion at the moment.