[Security:medium] Option userControl is not applied anymore in standard login process
Looking at the code, the userControl parameter is only applied in password reset and register:
clement@ader-worteks:~/dev/lemonldap-ng$ grep -r userControl lemonldap-ng-portal/
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/MailPasswordReset.pm: unless ( $req->{user} =~ /$self->{conf}->{userControl}/o ) {
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/Register.pm: m/$self->{conf}->{userControl}/o );
It should also be applied in standard login process.