Bug 32703 - Traceback if an invalid widget name is provided for an extended attribute
Traceback if an invalid widget name is provided for an extended attribute
Status: RESOLVED DUPLICATE of bug 28629
Product: UCS
Classification: Unclassified
Component: UDM - Extended Attributes
UCS 3.2
Other Linux
: P5 normal (vote)
: ---
Assigned To: UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-09-27 10:41 CEST by Moritz Muehlenhoff
Modified: 2018-04-13 13:29 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Moritz Muehlenhoff univentionstaff 2013-09-27 10:41:10 CEST
Steps to reproduce:
Create an extended attribute (e.g. for a user) with arbitrary values. The input field "Overwrite existing widget" in the UMC tab expects the internal name of the  univention.admin.property. If a different name is provided, the following traceback occurs if the user module is opened:

This should be sanitised, either by refusing to create the extended attribute if the correct univention.admin.property cannot be found or by simply ignoring the malformed value and contuing without overwriting a widget.

Execution of command 'udm/superordinates' has failed:

Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/__init__.py", line 204, in execute
    func( request )
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/udm/__init__.py", line 614, in superordinates
    module = self._get_module_by_request( request )
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/udm/__init__.py", line 112, in _get_module_by_request
    return self._get_module(object_type, request.flavor)
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/udm/__init__.py", line 101, in _get_module
    return UDM_Module( module_name )
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/udm/udm_ldap.py", line 221, in __init__
    self.load( force_reload=force_reload )
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/udm/udm_ldap.py", line 233, in load
    self.module = _module_cache.get( module, force_reload=force_reload )
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/udm/udm_ldap.py", line 155, in wrapper_func
    ret = func( *args, **kwargs )
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/udm/udm_ldap.py", line 207, in get
    udm_modules.init( ldap_connection, ldap_position, self[ name ], template_object, force_reload=force_reload )
  File "/usr/lib/pymodules/python2.6/univention/admin/modules.py", line 257, in init
    update_extended_attributes( lo, module, position )
  File "/usr/lib/pymodules/python2.6/univention/admin/modules.py", line 614, in update_extended_attributes
    currentTab.layout.append( ea_layout.label )
AttributeError: 'EA_Layout' object has no attribute 'label'
Comment 1 Philipp Hahn univentionstaff 2013-09-30 08:17:10 CEST
See Bug #29882 for exactly the same TraceBack, which got marked as a duplicate of Bug #28629.

*** This bug has been marked as a duplicate of bug 28629 ***