From 2214c4a2e8528a8a255d1c36bdbdfa7fb0a2be59 Mon Sep 17 00:00:00 2001
From: Jerome Mouneyrac <jerome@moodle.com>
Date: Thu, 2 Feb 2012 15:34:05 +0800
Subject: [PATCH] MDL-27360 Web service tokens are displayed for deleted users

---
 lib/moodlelib.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/moodlelib.php b/lib/moodlelib.php
index 52d2e5d2750..e50189d10ff 100644
--- a/lib/moodlelib.php
+++ b/lib/moodlelib.php
@@ -3810,6 +3810,12 @@ function delete_user($user) {
     // last course access not necessary either
     $DB->delete_records('user_lastaccess', array('userid'=>$user->id));
 
+    // remove all user tokens
+    $DB->delete_records('external_tokens', array('userid'=>$user->id));
+
+    // unauthorise the user for all services
+    $DB->delete_records('external_services_users', array('userid'=>$user->id));
+
     // force logout - may fail if file based sessions used, sorry
     session_kill_user($user->id);