"Sign in as" feature not working: logs the user out when impersonating Chris Publisher or Jane Reviewer
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 970
- Forks
- 486
- Avg merge
- 3d 33m
- Merged PRs (30d)
- 170
Description
Problem Statement
The "Sign in as" feature (accessed from the top right of the screen) is not working correctly. When I try to "Sign in as" another user — for example Chris Publisher or Jane Reviewer — instead of impersonating that user, the system logs me out completely.
Environment: demo.dotcms.com (dotAdmin)
Impact: Administrators cannot impersonate other users to test permissions, troubleshoot issues, or verify role-based behavior, because the action ends the current session instead of switching the active user.
A video showing the issue is attached below.
Steps to Reproduce
Video screencast:
https://github.com/user-attachments/assets/3779902c-116c-49f7-aa92-da83c2b52fac
Steps to reproduce:
- Log in to dotCMS as an admin user (e.g., on demo.dotcms.com).
- Click the user avatar / menu at the top right of the screen.
- Select the "Sign in as" option.
- Choose a user such as Chris Publisher or Jane Reviewer.
- Observe the result.
Expected behavior: The session should switch to the selected user (Chris Publisher / Jane Reviewer) so the admin can operate the platform as that user.
Actual behavior: Instead of impersonating the selected user, the system logs the current user out and returns to the login screen.
Acceptance Criteria
- Instead of impersonating the selected user, the system logs the current user out and returns to the login screen.
dotCMS Version
Server: 41390593 | PLATFORM EDITION: 26.04.22-01 - April 22, 2026 8:01 PM
Severity
High - Major functionality broken
Links
N/A
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in dotAdmin at the top-right user menu and reproduce the “Sign in as” flow with Chris Publisher or Jane Reviewer. Trace the authentication and session transition that occurs after selecting a user. Done means the selected user is impersonated and the administrator is not returned to the login screen.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100