This mail is an automated notification from the bugs tracker
 of the project: Savane.

/**************************************************************************/
[bugs #278] Latest Modifications:

Changes by: 
                Mathieu Roy <[EMAIL PROTECTED]>
'Date: 
                mer 25.02.2004 à 12:25 (Europe/Paris)

            What     | Removed                   | Added
---------------------------------------------------------------------------
          Resolution | None                      | Works for me
         Assigned to | None                      | yeupou
              Status | Open                      | Closed


------------------ Additional Follow-up Comments ----------------------------
Users that do no longer belongs to any group should not have an unix account. 
They have no use for it (since they are not attached to any group) but it poses 
usual additionnal security risk: more easily you give shell access to unknown 
people (as most users are), more easily you allow malicious behavior.

So it is a good thing, there by design, that only projects members get an unix 
account, because others members have nothing to do with anything but the web 
interface. 

If a user quit a project and join another one later, a new account we'll be 
created. 








/**************************************************************************/
[bugs #278] Full Item Snapshot:

URL: <http://gna.org/bugs/?func=detailitem&item_id=278>
Project: Savane
Submitted by: Sylvain Beucler
On: mer 25.02.2004 à 10:58

Category:  Backend
Severity:  1 - Trivial
Priority:  C - Normal
Resolution:  Works for me
Assigned to:  yeupou
Status:  Closed
Release:  1.0.0
Planned Release:  


Summary:  Users w/o projects are deleted

Original Submission:  I am not sure it is a good idea to remove users that are 
not part of a project anymore. One can quit the project he is contributing to, 
and later reuse its account to contribute to another project.

That behavior works in some cases, but not all.



The file that does the job is sv_users.pl.



More information here: 
https://savannah.gnu.org/bugs/?func=detailitem&item_id=7793

Commentaires :
------------------


-------------------------------------------------------
Date: mer 25.02.2004 à 12:25        By: yeupou
Users that do no longer belongs to any group should not have an unix account. 
They have no use for it (since they are not attached to any group) but it poses 
usual additionnal security risk: more easily you give shell access to unknown 
people (as most users are), more easily you allow malicious behavior.

So it is a good thing, there by design, that only projects members get an unix 
account, because others members have nothing to do with anything but the web 
interface. 

If a user quit a project and join another one later, a new account we'll be 
created. 














For detailed info, follow this link:
<http://gna.org/bugs/?func=detailitem&item_id=278>

_______________________________________________
  Message sent via/by Gna!
  http://gna.org/


Reply via email to