#5186 stageuser_add can create name conflict
Closed: invalid 6 years ago Opened 8 years ago by cheimes.

The stageuser_add plugin doesn't check if a normal user by that name already exists. That may lead to the case that somebody creates a stage user 'somebody' although a normal user 'somebody' is already in the system.

When I try to activate the stage user, I get an error message

Active user uid=somebody,cn=users,cn=accounts,dc=ipa,dc=test already exists

Thierry explained to me that the stage user plugin is designed that way. It deliberately doesn't enforce unique uids. It would be nice to have an additional option like 'enforce_unique' to implement a check on the server side. Otherwise the community portal needs to do two checks.

Hello Christian,

The double check could be done on portal side (user-find) as well but it really increase the usability of stageuser-add to propose that checking.

I am not sure for the flag name, 'enforce_unique' is fine but would need additional feedback. It expresses that the command ('stageuser-add' should fail if the uniqueness is not guaranty).

Thomas suggestion was to use 'check_duplicate' flag. That's Christian and I agreed on.

Metadata Update from @cheimes:
- Issue assigned to someone
- Issue set to the milestone: Future Releases

7 years ago

Closing the issue as "works as intended and designed".

Metadata Update from @cheimes:
- Issue close_status updated to: invalid
- Issue status updated to: Closed (was: Open)

6 years ago

Login to comment on this ticket.

Metadata