[Trac-tickets] Re: [The Trac Project] #1890: Can create tickets anonymously using the username of an authenticated user

The Trac Project noreply at edgewall.com
Fri Sep 23 14:29:54 CDT 2005


#1890: Can create tickets anonymously using the username of an authenticated user
----------------------------------------+-----------------------------------
 Reporter:  ziggy at ignition-project.com  |        Owner:  jonas
     Type:  defect                      |       Status:  new  
 Priority:  normal                      |    Milestone:       
Component:  general                     |      Version:  0.8.4
 Severity:  normal                      |   Resolution:       
 Keywords:                              |  
----------------------------------------+-----------------------------------
Comment (by mgood):

 It's not only confusing! Trac provides no way to see who really added a
 comment.  So users with the same privileges can impersonate me, and there
 is no visable way not to believe it.

 You think I am "mgood", as it appears above? Think twice... Can you tell
 my userid (assuming I logged in)? ...this is just to show what we are
 talking about...

 Can you at least add the actual username of the user in brackets if it is
 different from the name he wants to use, or something similar?

-- 
Ticket URL: <http://projects.edgewall.com/trac/ticket/1890>
The Trac Project <http://trac.edgewall.com/>


More information about the Trac-Tickets mailing list