Bug 38223 - Distribution module is case sensitive if usernames are compared
Summary: Distribution module is case sensitive if usernames are compared
Status: CLOSED DUPLICATE of bug 41122
Alias: None
Product: UCS@school
Classification: Unclassified
Component: UMC - Distribution
Version: UCS@school 4.0
Hardware: Other Linux
: P5 normal
Target Milestone: UCS@school 4.1 R2
Assignee: Florian Best
QA Contact: Daniel Tröder
URL:
Keywords:
: 34929 41265 (view as bug list)
Depends on:
Blocks:
 
Reported: 2015-04-09 11:56 CEST by Sönke Schwardt-Krummrich
Modified: 2016-08-17 14:35 CEST (History)
4 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2015-04-09 11:56:38 CEST 
The distribution module checks if the current user has the permission to open a selected distribution project. If not, the user is able to take over the project.

Currently the module (dunno if JS or backend) is checking if the UMC username matches with the projects username. And this comparison is performed case sensistive and leads to misbehaviour of the module if the user used a different case of its username than the LDAP returns.
The user is shown a warning, that he is not allowed to view foreign projects, even if the project is already owned by the user himself.

Username in LDAP: SamUser
Username used to log on at UMC: SAMuser
→ access to distribution projects is denied
Comment 1 Florian Best univentionstaff 2016-05-12 09:07:31 CEST 
*** Bug 41265 has been marked as a duplicate of this bug. ***
Comment 2 Florian Best univentionstaff 2016-05-23 12:25:55 CEST 
This has been fixed during Bug #41122. Both Javascript and Python comparison were wrong.

*** This bug has been marked as a duplicate of bug 41122 ***
Comment 3 Daniel Tröder univentionstaff 2016-06-22 11:24:51 CEST 
Fixed as part of the work on Bug #41122 for 4.1R2. If this should be backported to 4.0, please reopen.
Comment 4 Florian Best univentionstaff 2016-06-28 18:28:18 CEST 
UCS@school 4.1 R2 has been released:
http://docs.software-univention.de/release-notes-ucsschool-4.1R2v1-de.pdf

If this error occurs again, please use "Clone This Bug".
Comment 5 Florian Best univentionstaff 2016-08-17 14:35:29 CEST 
*** Bug 34929 has been marked as a duplicate of this bug. ***