On Tue, Apr 29, 2014 at 12:47 PM, BohwaZ <[email protected]> wrote: > Is it possible to delete a user from the database? I've got quite a lot > of ghost users (mainly spammers and hack attempts), that never posted > or contributed anything and I want to delete their accounts but can't > find any way to do that. >
One of the design principals of fossil is that all data is "fossilized," never to be changed again. You can delete the users from the user table. In theory that "might" cause problems, but when cloning a repo, the whole user list is NOT cloned (my local clone of the main fossil repo only contains 4 other "real" users), which implies that it is "safe" to simply delete the bogus users (e.g. my local repo works even though Andy Bradford's user is not in my local users table (through Brad H., Jan N., and DRH are... not sure why)): sqlite3 REPONAME > delete from user where login='NAME'; The underlying metadata never refers to users by db record ID, always by name, so in principal this should not cause any real grief. That said, i would recommend (until we see a definitive answer) that you simply disable the accounts. e.g. fossil user password NAME XYZ will set the password to XYZ (which the attacker presumably does not know). -- ----- stephan beal http://wanderinghorse.net/home/stephan/ http://gplus.to/sgbeal "Freedom is sloppy. But since tyranny's the only guaranteed byproduct of those who insist on a perfect world, freedom will have to do." -- Bigby Wolf
_______________________________________________ fossil-users mailing list [email protected] http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
