create a user with name same exist user, make exist user can't log-in
Description
Current can make user with all info duplicate without notify. When admin make mistake, create two user duplicate name (or email if log-in with email, ldap name if log-in with ldap) make exist user can't log-in.
I think name, email, ldap name must make unique constraint. wdyt?
, I committed a different version validating COALESCE(LDAPUser,Name) as the Login class uses it.
Carlos Ruiz March 6, 2014 at 8:08 PM
Hi Hiep, as the login logic is based on flags (sysconfig USE_EMAIL_FOR_LOGIN, LDAP filled, name) I think the validation must go in code and take into account same logic.
Regards,
Carlos Ruiz
Hiep Lq March 6, 2014 at 9:34 AM
Hi Carlos, to fix this kind error make constrain in database or make validation? what's best.
Carlos Ruiz March 5, 2014 at 4:34 PM
sounds like validation must be extended to the other fields affecting login too
Current can make user with all info duplicate without notify.
When admin make mistake, create two user duplicate name (or email if log-in with email, ldap name if log-in with ldap) make exist user can't log-in.
I think name, email, ldap name must make unique constraint. wdyt?