| Key: |
CHD-246
|
| Type: |
Bug
|
| Status: |
Closed
|
| Resolution: |
Cannot Reproduce
|
| Assignee: |
Unassigned
|
| Reporter: |
Joe Geck
|
| Votes: |
0
|
| Watchers: |
0
|
Clone this issue
|
|
If you were logged in you would be able to see more operations.
|
|
|
Original Estimate:
|
Unknown
|
Remaining Estimate:
|
Unknown
|
Time Spent:
|
Unknown
|
|
Summary:
This is super trivial and would not occur unless you went out of your way to create a broken setup, it's mainly here just for the bug record.
In all but the one case explained next, even if you created two users with the same e-mail/passwords you could always use the admin account to modify the worker logins to something different. However in the rare case someone marks the:
1st listed identical worker NOT an admin and
2nd listed identical worker an admin,
in the 'users & groups' section and then logs out, they would not be able to change things as the admin becomes inaccessible.
I suppose in any case it might be a good idea to prevent two workers from using the same e-mail login to avoid possible problems with features that need or would benefit from unique e-mail identifiers.
Steps:
* You can do this through the initial installer -or- the 'configuration'->'users & groups' *
~~~~
Installer
~~~~
1) Go through the installer and put in the same e-mail for 2 of the workers.
2) On the next worker details screen use the same password for both
3) Mark the second listed worker as 'admin'
4) Finish the installation and attempt to login
~~~~
GUI 'users & groups' (Assuming there is only one admin)
~~~~
1) In the Helpdesk go to the 'configuration'->'users & groups' section
2) Modify one of your non-admin workers and give them the same e-mail/password as the admin and mark him as an admin
3) Then modify the old admin worker and drop his admin account
4) Log out of the Helpdesk and attempt to log in again
Result:
The admin account will not be accessible, the Helpdesk login will fetch the non-admin account.
Note:
You cannot create a new worker in the 'users & groups' section with the same e-mail only modify existing ones as stated in the steps.
|
|
Rescheduled
Comment by Joe Geck [15/Jul/08 10:15 PM]
Was going through the open bugs and this particular one isn't possible to achieve anymore. Once the installer was simplified to only create the Admin account on setup, it "fixed" both scenarios. The installer, of course, was fixed and surprisingly in the 'Workers' tab the initial account cannot be revoked Admin status.
Even if you try to cheat the system and give another worker the same e-mail/password he will always be logged in as the Admin account.
|
|
Possible to create two users with the same e-mail/password in various ways, potentially creating problems only if you gave out of your way to cause them