dotCMS / dotCMS/core

"Sign in as" feature not working: logs the user out when impersonating Chris Publisher or Jane Reviewer

Open
#35,439 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

OKR : Customer Support stale
Dominant language
Java
Stars
970
Forks
486
Avg merge
3d 33m
Merged PRs (30d)
170

Description

Problem Statement

The "Sign in as" feature (accessed from the top right of the screen) is not working correctly. When I try to "Sign in as" another user — for example Chris Publisher or Jane Reviewer — instead of impersonating that user, the system logs me out completely.

Environment: demo.dotcms.com (dotAdmin)

Impact: Administrators cannot impersonate other users to test permissions, troubleshoot issues, or verify role-based behavior, because the action ends the current session instead of switching the active user.

A video showing the issue is attached below.

Steps to Reproduce

Video screencast:

https://github.com/user-attachments/assets/3779902c-116c-49f7-aa92-da83c2b52fac

Steps to reproduce:

  1. Log in to dotCMS as an admin user (e.g., on demo.dotcms.com).
  2. Click the user avatar / menu at the top right of the screen.
  3. Select the "Sign in as" option.
  4. Choose a user such as Chris Publisher or Jane Reviewer.
  5. Observe the result.

Expected behavior: The session should switch to the selected user (Chris Publisher / Jane Reviewer) so the admin can operate the platform as that user.

Actual behavior: Instead of impersonating the selected user, the system logs the current user out and returns to the login screen.

Acceptance Criteria
  • Instead of impersonating the selected user, the system logs the current user out and returns to the login screen.
dotCMS Version

Server: 41390593 | PLATFORM EDITION: 26.04.22-01 - April 22, 2026 8:01 PM

Severity

High - Major functionality broken

Links

N/A

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start in dotAdmin at the top-right user menu and reproduce the “Sign in as” flow with Chris Publisher or Jane Reviewer. Trace the authentication and session transition that occurs after selecting a user. Done means the selected user is impersonated and the administrator is not returned to the login screen.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.