it's possible to save a user with an already used ID if "update user" is clicked immediately
Description
that is without un focusing the user ID box
CSP Request Details
None
CSP Rejection Details
None
Potential Workaround
None
Attachments
1
07 Apr 2017, 02:58 PM
Checklist
hide
TestRail: Results
Activity
Show:
Niels Erik Nielsen April 7, 2017 at 3:22 PM
The new submit validation catches it first, though, so it does not get to the server like in the screen shot.
Niels Erik Nielsen April 7, 2017 at 3:00 PM
Verified against black box 0.8.3:
Jakub Skoczen April 3, 2017 at 1:19 PM
Needs to be verified.
Kurt Nordstrom March 31, 2017 at 4:33 PM
I have updated mod-users so that PUT will reject attempts to change the id field, and will not allow you to change the username if the desired username is already in use.
Jakub Skoczen March 31, 2017 at 12:51 PM
Yes, but PUT is used for updating the user and that's where I noticed the bug.
that is without un focusing the user ID box