Issue 63690 - SC allows login/user names with umlauts/special characters (which renders IZ unusable, etc)
Summary: SC allows login/user names with umlauts/special characters (which renders IZ ...
Status: CLOSED NOT_AN_OOO_ISSUE
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: Website general issues (show other issues)
Version: current
Hardware: All All
: P3 Trivial (vote)
Target Milestone: CEE Danube
Assignee: Unknown
QA Contact: issues@www
URL: http://www.openoffice.org/servlets/Join
Keywords:
Depends on:
Blocks:
 
Reported: 2006-03-27 21:33 UTC by lohmaier
Modified: 2017-05-20 09:42 UTC (History)
4 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description lohmaier 2006-03-27 21:33:23 UTC
Umlauts like "äöüß" must not be accepted as a valid character of a user name.

Currently SC allows to register as e.g. "clöph" and allows that user to join
projects.

But IssueZilla is unusable (as if you were not logged-in) and the umlaut in the
mail-alias also causes problems when trying to contact a user.

################
OOo must reject all chars not listed as valid on the register page.
################
Comment 1 lsuarezpotts 2006-03-27 21:46:02 UTC
support, cloph raises a good point. Can you ask Beril to add language that states explicitly that no 
umlauts, etc. (diacritical marks) be accepted?

thanks
louis
Comment 2 lohmaier 2006-03-27 22:00:33 UTC
adding a note/explanation is a first step to solve the problem, but additionally
the registration should be rejected when anything not listed in the list of
valid characters is entered - like it is the case now when you enter "%" for
example.

so please

* add explanation
* produce validation error
Comment 3 lohmaier 2006-05-15 23:50:04 UTC
Sigh. So it really seems that every support issue needs the monthly begging for
an response/reaction :-((

So *PING* again...
Comment 4 Unknown 2006-05-17 17:51:48 UTC
Taking...
Comment 5 Unknown 2006-05-17 18:21:37 UTC
On the Register page, it says:

"Up to 16 characters in length; valid characters are a-z, A-Z, 0-9 and 
underlines. Spaces are not permitted. Example: jandoe"

That should be a sufficient verbage, right? Or, does it need additional 
explicit language? If so, where do we draw the line..what is disallowed? I 
personally think that it is good to only list that which is allowed.

However, beyond the scenario of users overlooking this and using the other 
characters, the fact that CEE is not rejecting them is the ACTUAL issue.

That appears to be a non-issue from Danube-S onwards. The stage box for OO.o 
is not yet ready for verification(will take another 2 weeks). In the interim 
try registering on the stage box for Netbeans (running Danube-S) with those 
special chars. It rejected me(both for "clöph" and "aniäöüß").

The stage box URL is stage.netbeans.org. Please update this ticket with your 
feedback.
Comment 6 lohmaier 2006-05-18 00:04:53 UTC
> That should be a sufficient verbage, right?

No, its not. Since the system doesn't enforce this settings and character ranges
depend on locale.
so [a-z],[A-Z] may be clear in english, but not in danish, german,....

It does need additional mention of "Do not use umlauts or other special
characters such as (but not limited to): äö#ß<some others>"

> If so, where do we draw the line..what is disallowed?

Everything that results in a non-working username is disallowed.

> I personally think that it is good to only list that which is allowed.

That could be sufficient if the system would enforce this limitation, but still
it gets clearer if you state that umlauts/special characters are not allowed.
You don't need to list every sinlge character that is not allowed.

> However, beyond the scenario of users overlooking this and using the other 
> characters, the fact that CEE is not rejecting them is the ACTUAL issue.

Exactly.
The version on www.stage.netbeans.org does the validity checking, so the problem
is solved in that version.

But since it will take a while unitl OOo runs on that new version, I'd
appreciate if the text on the login-page could be altered so that it states that
special characters/umlauts are prohibited.
Comment 7 Unknown 2006-05-18 00:24:07 UTC
Actually, OO.o is slated to go to Danube-S in about a month. I will mark this 
as RESOLVED->LATER. The verbage will be redundant after this upgrade, since it 
will reject such characters.

Let me know if this is OK.
Comment 8 Unknown 2006-05-18 00:24:29 UTC
Err...Re-opening.
Comment 9 Unknown 2006-05-18 00:25:09 UTC
Meant to RESOLVE->LATER. Target milestone is set.
Comment 10 stx123 2006-05-18 09:06:13 UTC
That's fine with me. Let's work towards the upgrade...
Comment 11 Frank Schönheit 2006-06-02 12:54:49 UTC
works on OOo staging size (http://www.stage.openoffice.org/index.html), names
with umlauts are rejected as expected.