Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-12177

Duplicate user accounts allowed in database because no unique constraint configured on USER table

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 2.7
    • 2.6.0
    • None

    • MySQL5

      The user table of the atlassian user repo doesn't have unique index on the name column. This allows duplicates to be created under certain circumstances. Since many other tables in the confluence db refer to the user via name instead of the id, this can cause data integrity and potentially also security issues.

       CREATE TABLE `users` (
  `id` bigint(20) NOT NULL default '0',
  `name` varchar(255) NOT NULL default '',
  `password` varchar(255) default NULL,
  `email` varchar(255) default NULL,
  `created` datetime default NULL,
  `fullname` varchar(255) default NULL,
  PRIMARY KEY  (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8

            akazatchkov Anatoli
            15d9a6950818 Igor Minar
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: