Defect #2473
closedLogin and mail should not be case sensitive
100%
Description
Actually, uniqueness tests on login and mail fields are case sensitive, so you can have many accounts with same login and/or mail. And the "=" statement isn't case sensitive for strings on all databases, the method find_by_login need a fix to be case insensitive like find_by_mail.
For example, when i use Redmine with sqlite3, there are sides effects with "On the fly" ldap acounts creation and with SVN users automatic assignement because of find_by_login matching "login" with "login" but not "login" with "Login" ...
Files
Related issues
Updated by Tony Arnold almost 16 years ago
Is this patch going to be included in the core redmine product? We're having problems with our LDAP logins at present - we treat usernames as being case-insensitive, however redmine currently does not.
Updated by Stanislav German-Evtushenko about 15 years ago
Tony Arnold wrote:
Is this patch going to be included in the core redmine product? We're having problems with our LDAP logins at present - we treat usernames as being case-insensitive, however redmine currently does not.
It will be great if it's included in redmine. We have the same problem.
Updated by Stanislav German-Evtushenko about 15 years ago
Teddy L wrote:
Actually, uniqueness tests on login and mail fields are case sensitive, so you can have many accounts with same login and/or mail. And the "=" statement isn't case sensitive for strings on all databases, the method find_by_login need a fix to be case insensitive like find_by_mail.
For example, when i use Redmine with sqlite3, there are sides effects with "On the fly" ldap acounts creation and with SVN users automatic assignement because of find_by_login matching "login" with "login" but not "login" with "Login" ...
Thank you, Teddy! Your patch works with 0.8-stable!
Updated by Stanislav German-Evtushenko over 14 years ago
- File redmine-0.9-stable-r3695-login_case_insensitive.patch redmine-0.9-stable-r3695-login_case_insensitive.patch added
Patch has been updated.
Updated by Marcel Waldvogel over 14 years ago
Patch #4732 addresses the same problem, but there at least PostgreSQL and MySQL should use the index instead of a table scan.
Dear maintainers: Please do include one of those fixes!
Updated by Eric Voisard over 14 years ago
Just a comment: In the SMTP point of view, the local part of email addresses IS case-sensitive (RFC821, RFC822, RFC2821). username@domain.org is not the same mailbox as Username@domain.org. Don't you think considering email addresses as case insensitive could have some undesired side effects?...
Updated by Greg Mefford over 14 years ago
Created patches on github:
For the validation: http://github.com/GregMefford/redmine/commit/8269a9f774e3e41c0ddd0b4c2913dcc000cdbb82
For the user login: http://github.com/GregMefford/redmine/commit/022c8addba1714bc47e90747e33533702fcb1ca6
Updated by Eric Davis over 14 years ago
- Status changed from New to Closed
- Assignee set to Eric Davis
- % Done changed from 0 to 100
- Resolution set to Fixed
I've committed a patch by Greg Mefford that makes the user login's case insensitive (r3807).