[Knode-devel] [Bug 86070] New: security compromise in identity of group properties

[Sergey Y.Afonin]

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
      
http://bugs.kde.org/show_bug.cgi?id=86070      
           Summary: security compromise in identity of group properties
           Product: knode
           Version: 0.7.7
          Platform: unspecified
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: wishlist
          Priority: NOR
         Component: general
        AssignedTo: knode-devel kde org
        ReportedBy: asy kraft-s ru


Version:           0.7.7 (using KDE 3.2.2, ALT Linux)
Compiler:          gcc version 3.3.3 20040412 (ALT Linux, build 3.3.3-alt4)
OS:                Linux (i686) release 2.4.26

Hello.

Currient personal group settings can cause security compromise:
empty fields in identity fill from account properties but this isn't obviously.

I see two ways for resolve it:

1 (easy). Don't fill empty fields in identity of group properties if any one field specified

2 (good). Display filling data from account properties in fields of identity of group properties if field's data isn't specified.