Bug #572

Admin_Perm_DB_Common::_getPermUserId()

Details

Submitted	2004-01-13 19:39 UTC
From	jmikola at burgiss dot com
Assigned	lsmith
Status	Closed
Package	LiveUser
PHP Version	Irrelevant
OS	ANY
Roadmaps	(Not assigned)

Comments

[2004-01-13 19:39 UTC] jmikola at burgiss dot com

Description:
------------
the following was mentioned on the mailing list in late december but seems to have been overlooked since:

after reviewing this function, i don't see how it would handle multiple auth containers. given 2 auth containers, it's quite possible that a user with auth_id X wold exist in both, and that each user with auth_id X in their respective containers would have a unique perm_id, Y and Z (such is the nature of perm_id's).

the problem i see is that requesting a translation from auth_id -> perm_id for one of these users would essentially have no guarentee which was being returned, since the sql only where condition is based on the auth_id numeric value. i think an additional condition (and argument) to ensure a match of the auth container name is also required for this method to be practical.