Hi

I am unable to find info on how the expiry date actually enforces itself on security roles. I tried to simulate an expiration by assigning myself to a role and setting an expiry date. I then moved the pc clock past the date and logged back in, but I was still a member of the role.

Is it a scheduler that needs to run that removes users from roles that expire, and if so, which scheduler runs? It doesn't seem to be enforced in the login module, so how does it actually work??