[Exist-development] Another Ant-related security problem....

[Andrzej J. T. <an...@ch...>]

Dmitry:

If you try to create a user a 2nd time, using the ant task, then you get the following exception:

[exist:adduser] XMLDB exception caught: Failed to invoke method addAccount in class
org.exist.xmlrpc.RpcConnection: Configuration can't be used by <account name="myuser"
id="9"></user>, because allready in use by <account name="myuser" id="6" home="/db"></user>

Which is fine.  But then the password on the userid gets screwed up and you can't use that user any
more!  Which is not so fine.  Incidentally, the second addition is being added with the same
password as the first one, so nothing should change.

I think that adding a user that already exists shouldn't cause this type of a problem.

-- 
Andrzej Taramina
Chaeron Corporation: Enterprise System Solutions
http://www.chaeron.com