when a package or an account is suspended, SQL Server database is still accessible by the database user. As far as I remember the user should be removed from the database roles or get deny permissions on login, but this is not happening. Has this been changed? I'm having the same issue on 1.4.6 and 1.4.8 version.
I don't believe SQL Server has ever had an method to suspend the user by removing the role or deny permissions. You can make a feature request at https://github.com/FuseCP/SolidCP/issues/new?assignees=&labels=&template=feature_request.md&title= for this to be added.
I believe you are referring to what I mentioned here - https://solidcp.com/forum/question/issue-when-suspended-account-the-database-not-take-offline/.
When I suspend a package from SolidCP, it adds db_denydatareader and db_denydatawriter roles to database user.
The problem is that it (randomly) fails and I don't get any error output.
Sorry your correct it does have a method from looking at https://github.com/FuseCP/SolidCP/blob/master/SolidCP/Sources/SolidCP.Providers.Database.SqlServer/MsSqlServer.cs#L1207 .
If you can log a bug at https://github.com/FuseCP/SolidCP/issues/new?assignees=&labels=&template=bug_report.md&title= [MsSQL]%20Suspend%20package%20not%20always%20running with the information on the issue, version numbers & if there is a way to always replicate the issue we can take a further look in the future.