Loading...
 
Skip to main content

Show realname instead of userid in user field in trackers when the feature is set to do so

Status
Open
Subject
Show realname instead of userid in user field in trackers when the feature is set to do so
Version
12.x
15.x
Category
  • Error
Feature
External Authentication (LDAP, AD, PAM, CAS, etc)
Realname
Trackers
Resolution status
New
Submitted by
Xavier de Pedro
Lastmod by
Xavier de Pedro
Rating
(0)
Related-to
Description

I don't know whether it's a regression or not.

There is a feature called "Show user's real name instead of login in autocomplete selector in trackers feature" (Admin/Config Wizard > Community General Settings). I ensured that the user field in the tracker is set to display realname also instead of username. The feature works when listing items through the tracker itself of plugin trakerlist, etc., but ....

....it does not do the job at the autocomplete selector for the filtering of items.

See it reproduced here:
http://xavi-9794-5892.show.tikiwiki.org/tiki-view_tracker.php?trackerId=1&status=o&sort_mode=created_desc&filterfield=10&filtervalue10=user1&filtervalue2=&filtervalue_other=&filtervalue3=&filtervalue_other=&filtervalue4=&filtervalue_other=&filtervalue5=&filtervalue_other=&filtervalue6=&filtervalue_other=&filtervalue7=&filtervalue_other=&filtervalue8=&filtervalue_other=&filtervalue9=&filtervalue_other=&filtervalue11=&filter=Filter#

u: admin
p: 12345

This can disclose taxID's or other not-so-public information in LDAP setups.

Importance
4
Easy to solve?
8
Priority
32
Demonstrate Bug on Tiki 19+
Please demonstrate your bug on show2.tiki.org
Demonstrate Bug (older Tiki versions)
Ticket ID
5910
Created
Wednesday 13 April, 2016 19:01:51 UTC
by Xavi (as xavidp - admin)
LastModif
Wednesday 13 April, 2016 19:01:51 UTC


Collapse/expand modules below
Show PHP error messages