You need to correct control on U/P authentication mode in SCM 4.0
There i a bug , in UP authentication mode , i can insert the password i want , and i have always access to work console, with full activity enabled.
Only if the user i set is incorrect the access is denied. Big Problem i think !!
Yougin shared this idea
fixed in 18.104.22.168
I'm wait for good news... Correction i mean :-)
Adminpsantosl (Admin, plasticscm) commented
Right! :O. On it.