0007880: Create new user with same name is allowed. Editting the user reports an error. - MantisBT

ID	Project	Category	View Status	Date Submitted	Last Update

0007880	mantisbt	administration	public	2007-04-04 18:11	2009-01-15 11:26

Reporter	Orokin	Assigned To	thraxisp
Priority	normal	Severity	trivial	Reproducibility	always
Status	closed	Resolution	fixed
Product Version	1.1.0a2
Fixed in Version	1.2.0a3

Summary	0007880: Create new user with same name is allowed. Editting the user reports an error.
Description	When creating a new user, and the user has the same name as their username, the system allows it to be created. If you try to edit that user, the system warns that the username and name are identical and blocks any changes from happening.
Steps To Reproduce	Create a new user with username and realname as test Click Edit for the test user and click Update The error is produced.
Tags	No tags attached.

giallu 2007-04-12 06:41 reporter ~0014339	Could you please cut & paste here the error message you are receiving?

Orokin 2007-04-12 11:46 reporter ~0014340 Last edited: 2007-04-12 11:47	APPLICATION ERROR #807 The "Real Name" chosen matches another user's login name. Please choose another. This is for the same user, not two separate.

djay 2008-08-25 07:40 reporter ~0019215 Last edited: 2008-08-25 07:41	It happens because there's a specific test in code - the real name is get compared to an existing username. Depending on general concept of allowing usernames to be used as Real Names or not, there are 2 possible solutions: If not, check it on signup process and don't allow a user to register with his name being as his or other user username. If yes, remove the testing clause. (it is in is_user_realname_unique() function ).

thraxisp 2008-08-27 21:58 reporter ~0019260	Confirmed. The design intent is that a user CANNOT change their real name to another user's username. For example, if the installation shows real names, any user might change their real name to the name of another user who had no real name set. Thus, they could pose as the second user for malicious purposes.

thraxisp 2008-08-27 22:09 reporter ~0019261	fixed in Revision: 5528 http://mantisbt.svn.sourceforge.net/mantisbt/?rev=5528&view=rev