[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2010-04-21 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487

Platonides platoni...@gmail.com changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 CC||platoni...@gmail.com
 Resolution||FIXED

--- Comment #9 from Platonides platoni...@gmail.com 2010-04-21 17:34:04 UTC 
---
Fixed on r65405

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2010-01-21 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487

Karun Dambietz ka...@linux.com changed:

   What|Removed |Added

 CC||ka...@linux.com

--- Comment #8 from Karun Dambietz ka...@linux.com 2010-01-22 07:36:28 UTC ---
(In reply to comment #7)
 Review of the patch: it doesn't take into account that there are different DB
 backends, most of which doesn't create that dummy account. Therefore, someone
 could register a stealth account 'Anonymous' that will be hard to track. And
 using a hardcoded value for checks is also extremely problematic.

Would checking the database, be suitable so if postgresql is used then the
anonymous account is hidden from the user list?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2010-01-09 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487


Max Semenik maxsem.w...@gmail.com changed:

   What|Removed |Added

   Keywords|need-review |




--- Comment #7 from Max Semenik maxsem.w...@gmail.com  2010-01-09 10:33:16 
UTC ---
Review of the patch: it doesn't take into account that there are different DB
backends, most of which doesn't create that dummy account. Therefore, someone
could register a stealth account 'Anonymous' that will be hard to track. And
using a hardcoded value for checks is also extremely problematic.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2009-05-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487


Karun Dambiec ka...@fastmail.fm changed:

   What|Removed |Added

 Status|ASSIGNED|NEW




-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2009-05-09 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487





--- Comment #6 from Karun Dambiec ka...@fastmail.fm  2009-05-09 11:51:16 UTC 
---
Are there any backdoors that could result from the Anonymous user being in the
database? I think if they are able to do something to the anonymous user in the
database through a backdoor, then it will probably just affect all users rather
than just one.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2009-05-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487





--- Comment #4 from Karun Dambiec ka...@fastmail.fm  2009-05-09 00:52:09 UTC 
---
Hello,
I would like to propose that we hide the User:Anonymous user from the user
list. 


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2009-05-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487





--- Comment #5 from Karun Dambiec ka...@fastmail.fm  2009-05-09 01:11:43 UTC 
---
Created an attachment (id=6098)
 -- (https://bugzilla.wikimedia.org/attachment.cgi?id=6098)
Patch that hides User:Anonymous on the user list.

I have created a patch that hides User:Anonymous from the user list. Im not
sure if this would be the best way to resolve this bug.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2009-05-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487


Karun Dambiec ka...@fastmail.fm changed:

   What|Removed |Added

   Keywords||need-review




-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2009-04-30 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487


Karun Dambiec ka...@fastmail.fm changed:

   What|Removed |Added

 CC||ka...@fastmail.fm
 Status|NEW |ASSIGNED




-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/edit able , but it is visbile in user list

2009-02-21 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487


Alexandre Emsenhuber [IAlex] alex.emsenhu...@bluewin.ch changed:

   What|Removed |Added

   Keywords||postgresql




-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/ edit able , but it is visbile in user list

2009-01-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487


Tim Starling tstarl...@wikimedia.org changed:

   What|Removed |Added

 CC||tstarl...@wikimedia.org
 Blocks||384




--- Comment #3 from Tim Starling tstarl...@wikimedia.org  2009-01-09 04:43:34 
UTC ---
It's a nasty hack implemented in order to make foreign key constraints work in
a schema that wasn't designed for them.

-- Create a dummy user to satisfy fk contraints especially with revisions
INSERT INTO mwuser
  VALUES
(DEFAULT,'Anonymous','',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,now(),now());

I would suggest removing the foreign key constraints from the PG schema, which
are more trouble than they're worth.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 16487] UserManagement: Anonymous Account not create-/delete-/ edit able , but it is visbile in user list

2008-11-28 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=16487





--- Comment #1 from [EMAIL PROTECTED]  2008-11-28 17:57:58 UTC ---
Please Note: Path to wiki is allways the same, I just faild at renaming the
path in this bug report.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l