View Issue Details

IDProjectCategoryView StatusLast Update
0005417mantisbtadministrationpublic2005-04-18 10:18
Reportercsaba Assigned Tothraxisp  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Product Version0.19.2 
Fixed in Version1.0.0a1 
Summary0005417: Can't set the real name to the login name
Description

At bugs.mantisbt.org, I have just created an account with user name csaba.
If I attempt to set the real name to Csaba, then I get an error:

APPLICATION ERROR #807
The "Real Name" chosen matches another user's login name. Please choose another.

This is factually incorrect and also doesn't seem reasonable from a user's point of veiw. Why shouldn't my real name be able to match my login name?

TagsNo tags attached.

Activities

grangeway

grangeway

2005-04-09 17:03

reporter   ~0009773

The 'idea' behind 'real name' is that you use it to store someones "firstname surname" combination.

Some people then wanted to publically display this information INSTEAD of someone's username. I made the argument that if you had mantis configured to show real name if present, else username (like in the bugtracker @ bugs.mantisbt.org), you could impersonate another user by setting your real name to match that user's username.

Hence, you can't set realname to match a login name.

At the same time as your login name is 'csaba' and your realname would normally be 2 words (first / surname), if you was using your full realname, it wouldn't be an issue.

I hope this makes some sense.

Paul

thraxisp

thraxisp

2005-04-09 17:50

reporter   ~0009775

Actually, YOUR username and realname would be allowed to match, but your realname cannot match anyone elses username.

I think that this is broken in CVS HEAD.

thraxisp

thraxisp

2005-04-09 18:02

reporter   ~0009776

Fixed in CVS, comparison in error.

core/user_api.php -> 1.94