[Zope-CMF] Usernames and spaces
Grootel, Marc van
Marc.vanGrootel@bowneglobal.nl
Tue, 22 Jan 2002 14:43:17 +0100
Hi Tres,
I've logged this yesterday http://www.zope.org/Products/PTK/Tracker/456
According to Andrew it should be fixed now (that was quick). I don't
have CVS set up so I'll have to assume it is.
> This has been fixed in CMF-1_2-branch and the CMF CVS HEAD.
> Andrew
Thanks
--Marc
> -----Original Message-----
> From: Tres Seaver [mailto:tseaver@zope.com]
> Sent: Friday, January 18, 2002 10:13 PM
> To: Grootel, Marc van
> Cc: 'zope-cmf@zope.org'
> Subject: Re: [Zope-CMF] Usernames and spaces
>
>
> Grootel, Marc van wrote:
>
> > Hi,
> >
> > I've worked with Zope and CMF (btw great stuff) for a while
> now and did
> > never come across this issue.
> >
> > It is probably not legal to do so but i created a username that has
> > spaces. Logged on to it and everything seemed to work fine.
> > I could add CMF documents, folders etc, access them through WebDAV
> > etc. Nothing wrong with it.
> >
> > Then i connected using FTP and saw the files and folders
> added through
> > that account had a part of their creation timestamp
> prefixed to the id
> > (names like "18 16:32 test" instead of "test").
> >
> > Probably they are not really there since from the browser
> everything looks
> > fine.
> >
> > My first thought was i cut myself on the bleeding edge but
> then i checked
> > and created another account without the spaces and the
> problem was gone.
> >
> > I know creating usernames with spaces is probably not a
> wise idea anyway
> > but since everything was working i saw no harm in it, only
> FTP seems to
> > suffer
> > from the problemn (afaiks).
> >
> > Should there be a warning when trying to create such
> accounts or is this
> > a real bug?
>
> Both. The registration tool is responsible for enforcing a particular
> site's policies for valid account IDs and passwords, via its
> 'isMemberIdAllowed' and 'testPasswordValidity' methods. It doesn't
> appear from examination that the 'isMemberIdAllowed' of the CMFDefault
> registration tool would permit such an ID, so perhaps the bug is that
> the registration process is bypassing the check.
>
> Please file this as a tracker issue:
>
> http://www.zope.org/Products/PTK/Tracker
>
>
> --
> ===============================================================
> Tres Seaver tseaver@zope.com
> Zope Corporation "Zope Dealers" http://www.zope.com
>
>
> _______________________________________________
> Zope-CMF maillist - Zope-CMF@zope.org
> http://lists.zope.org/mailman/listinfo/zope-cmf
>
> See http://www.zope.org/Products/PTK/Tracker for bug reports
> and feature requests
>