Tian Jiang created IOTDB-687:
--------------------------------

             Summary: Constrain the length of users passwords
                 Key: IOTDB-687
                 URL: https://issues.apache.org/jira/browse/IOTDB-687
             Project: Apache IoTDB
          Issue Type: Improvement
          Components: Core/Others
            Reporter: Tian Jiang


We have a lower bound of 4 for the lengths of users and passwords, but there is 
no upper bound for that, so a malicious user may attack by using very long user 
names and it would be better to have a constraint on the length.

However, generally, only DBAs have such privileges, so it would not be a very 
big concern.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to