Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Date: Thu, 5 Jan 2012 11:29:39 +0000 (UTC)
From: "Marcos Zanona (Updated) (JIRA)" <jira@apache.org>
To: dev@couchdb.apache.org
Message-ID: 
 <411779389.8682.1325762979198.JavaMail.tomcat@hel.zones.apache.org>
In-Reply-To: 
 <832020880.8647.1325762499716.JavaMail.tomcat@hel.zones.apache.org>
Subject: [jira] [Updated] (COUCHDB-1374) Server Admin never get deleted
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/COUCHDB-1374?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcos Zanona updated COUCHDB-1374:
-----------------------------------

    Description: 
It seems that when creating a Server Admin and then deleting that same user with another admin makes the first user stay active, resulting in a no deletion and doesn't block the access to the old admin access.
It becomes marked as  {"error":"not_found","reason":"deleted"} but still having access to the whole system as an admin.
That is not the case for simple users, only for admin level ones.
* I have experienced this creating these users through Futon

  was:
It seems that when creating a Server Admin and then deleting that same user with another admin makes the first user stay active, resulting in a no deletion and doesn't block the access to the old admin access.
It becomes marked as  {"error":"not_found","reason":"deleted"} but still having access to the whole system as an admin.
That is not the case for simple users, only for admin level ones.
* I have experiences this creating these users through Futon

    
> Server Admin never get deleted
> ------------------------------
>
>                 Key: COUCHDB-1374
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-1374
>             Project: CouchDB
>          Issue Type: Bug
>          Components: Futon, Infrastructure
>    Affects Versions: 1.1.1
>            Reporter: Marcos Zanona
>              Labels: admin, login, security, validation
>             Fix For: 1.2, 1.3, 1.1.2
>
>
> It seems that when creating a Server Admin and then deleting that same user with another admin makes the first user stay active, resulting in a no deletion and doesn't block the access to the old admin access.
> It becomes marked as  {"error":"not_found","reason":"deleted"} but still having access to the whole system as an admin.
> That is not the case for simple users, only for admin level ones.
> * I have experienced this creating these users through Futon

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira