Duplicate user accounts allowed in database because no unique constraint configured on USER table

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Medium
    • 2.7
    • Affects Version/s: 2.6.0
    • Component/s: None
    • Environment:

      MySQL5

      The user table of the atlassian user repo doesn't have unique index on the name column. This allows duplicates to be created under certain circumstances. Since many other tables in the confluence db refer to the user via name instead of the id, this can cause data integrity and potentially also security issues.

       CREATE TABLE `users` (
  `id` bigint(20) NOT NULL default '0',
  `name` varchar(255) NOT NULL default '',
  `password` varchar(255) default NULL,
  `email` varchar(255) default NULL,
  `created` datetime default NULL,
  `fullname` varchar(255) default NULL,
  PRIMARY KEY  (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8

              Assignee:
              Anatoli
              Reporter:
              Igor Minar
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: