KohanaPHP » Kohana v3.x » Auth

The ORM Auth driver always marks sessions when you call force_login:

// Mark the session as forced, to prevent users from changing account information
$this->_session->set('auth_forced', TRUE);

This behaviour should be optional. You don't always need this extra session variable. Actually, I've never needed it. Other ways exist to limit user permissions, like roles. Moreover, calling force_login doesn't always imply you want to limit permissions in the first place. For example, I'm using it to create a regular auth session after somebody logged in via OAuth.

Ideally, I'd just get rid of auth_forced session setting. I guess I could live with an extra parameter too:

function force_login($user, $mark_session_as_forced = FALSE)